@inproceedings{pixeldefendleveraginggenerativemodelsto,
  title = {PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples},
  author = {Yang Song and Taesup Kim and Sebastian Nowozin and Stefano Ermon and Nate Kushman},
  year = {2017},
  booktitle = {ICLR 2018 1},
  eprint = {1710.10766},
  archivePrefix = {arXiv},
  url = {http://arxiv.org/abs/1710.10766v3},
}