Provable defenses against adversarial examples via the convex outer adversarial polytope

Open in new window