Dynamic defenses and the transferability of adversarial examples | IEEE Conference Publication | IEEE Xplore