Delving into Transferable Adversarial Examples and Black-box Attacks
Liu, Yanpei, Chen, Xinyun, Liu, Chang · arXiv · 2016