Towards the Science of Security and Privacy in Machine Learning
Optimal randomized classification in adversarial settings