@inproceedings{ensembleadversarialtrainingattacksand,
  title = {Ensemble Adversarial Training: Attacks and Defenses},
  author = {Florian Tramèr and Alexey Kurakin and Nicolas Papernot and Ian Goodfellow and Dan Boneh and Patrick McDaniel},
  year = {2017},
  booktitle = {ICLR 2018 1},
  eprint = {1705.07204},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1705.07204v5},
}