Nandy, Hsu, Lee, 2020. Approximate Manifold Defense Against Multiple Adversarial Perturbations.