Adversarial examples: A survey
Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers.