A Dual Approach to Scalable Verification of Deep Networks