The Space of Transferable Adversarial Examples
Stealing Machine Learning Models via Prediction APIs