n-ML: Mitigating adversarial examples via ensembles of topologically manipulated classifiers. [PDF, BibTeX, project page, ]Mahmood Sharif, Lujo Bauer, and Michael K. Reiter. arXiv preprint 1912.09059, December 2019.