Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks