Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach
MagNet: A Two-Pronged Defense against Adversarial Examples