Practical Black-Box Attacks against Deep Learning Systems using Adversarial Examples.
Man vs. computer: benchmarking machine learning algorithms for traffic sign recognition.