Yu, Yu, Jiang, Zhang, Qiao, 2021. HAD-GAN: A Human-perception Auxiliary Defense GAN to Defend Adversarial   Examples.