@inproceedings {206180, author = {Warren He and James Wei and Xinyun Chen and Nicholas Carlini and Dawn Song}, title = {Adversarial Example Defense: Ensembles of Weak Defenses are not Strong}, booktitle = {11th USENIX Workshop on Offensive Technologies (WOOT 17)}, year = {2017}, address = {Vancouver, BC}, url = {https://www.usenix.org/conference/woot17/workshop-program/presentation/he}, publisher = {USENIX Association}, month = aug }