Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong
Explaining and Harnessing Adversarial Examples