SafetyNet: Detecting and Rejecting Adversarial Examples Robustly
Adversarial examples in the physical world