TY - RPRT TI - The best defense is a good offense: Countering black box attacks by predicting slightly wrong labels AU - Yannic Kilcher AU - Thomas Hofmann PY - 2017 UR - https://arxiv.org/abs/1711.05475 ID - 1711.05475 ER -