Adversarial Machine Learning at Scale
Intriguing properties of neural networks