Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks
Automatically Evading Classifiers: A Case Study on PDF Malware Classifiers