Bamboo: Ball-Shape Data Augmentation Against Adversarial Attacks from All Directions
Practical Black-Box Attacks against Deep Learning Systems using Adversarial Examples.