Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks - Weilin Xu; David Evans; Yanjun Qi (2017)