Defense Against Adversarial Attacks with Saak Transform
Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients