@misc{xu2017feature, title={Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks}, author={Weilin Xu and David Evans and Yanjun Qi}, year={2017}, eprint={1704.01155}, archivePrefix={arXiv}, primaryClass={cs.CV}, url={https://arxiv.org/abs/1704.01155} }