Built-in Vulnerabilities to Imperceptible Adversarial Perturbations
Wide Residual Networks