Query-Efficient Black-box Adversarial Examples (superceded)
Intriguing properties of neural networks