@inproceedings{thwartingfinitedifferenceadversarial,
  title = {Thwarting finite difference adversarial attacks with output randomization},
  author = {Haidar Khan and Daniel Park and Azer Khan and Bülent Yener},
  year = {2019},
  booktitle = {ICLR 2020 1},
  eprint = {1905.09871},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1905.09871v1},
}