Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks | IEEE Conference Publication | IEEE Xplore