Adversarial Attacks on Variational Autoencoders
Adversarial Images for Variational Autoencoders