Training verified learners with learned verifiers
Adversarial examples in the physical world