On the Effectiveness of Defensive Distillation
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks