benchmarking neural network robustness to common corruptions and perturbations .
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks