Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers.
The Limitations of Deep Learning in Adversarial Settings