Defense Against Adversarial Attacks with Saak Transform
Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks