Is AmI (Attacks Meet Interpretability) Robust to Adversarial Examples?

arXiv:1902.02322