Distributionally Robust Deep Learning as a Generalization of Adversarial Training
Intriguing properties of neural networks