@inproceedings{ensemblemethodsasadefensetoadversarial,
  title = {Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks},
  author = {Thilo Strauss and Markus Hanselmann and Andrej Junginger and Holger Ulmer},
  year = {2017},
  booktitle = {ICLR 2018 1},
  eprint = {1709.03423},
  archivePrefix = {arXiv},
  url = {http://arxiv.org/abs/1709.03423v2},
}