Adversarial Defense based on Structure-to-Signal Autoencoders
Explaining and Harnessing Adversarial Examples