A Two-Layer Moving Target Defense for Image Classification in Adversarial Environment | IEEE Conference Publication | IEEE Xplore