Defense Against Adversarial Attacks with Saak Transform
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks