Attack on ensemble models? #88

Hi, first want to say thanks for your effort to make research much easier!

Recently, some papers, among which i cites two, create adversarial images on multiple models to increase transferability and success rate.

1. Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets
2. Delving into Transferable Adversarial Examples and Black-box Attacks

I wonder would it be possible to add this feature to this project?