Adversarial Defense based on Structure-to-Signal Autoencoders
One weird trick for parallelizing convolutional neural networks