S. Alfeld, X. Zhu, and P. Barford, “Explicit Defense Actions Against Test-Set Attacks”, AAAI, vol. 31, no. 1, Feb. 2017.