Adversarial Active Learning for Deep Networks: a Margin Based Approach
Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong