S. Tian, G. Yang, and Y. Cai, “Detecting Adversarial Examples Through Image Transformation”, AAAI, vol. 32, no. 1, Apr. 2018.