Learning to Attack: Adversarial Transformation Networks
DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks