Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
Anish Athalye, Nicholas Carlini, David Wagner
https://arxiv.org/abs/1802.00420
Feb. 1, 2018


Adversarial training