Diversity Can Be Transferred: Output Diversification for White-and Black-box Attacks, Yang Song 1 Department of Computer Science, Stanford University, Stanford, CA, USA