Before revision:  Over the years, researchers have successfully attacked image classifiers in , both, white and black-box setting.
After revision:  Over the years, researchers have successfully attacked image classifiers in both, white and black-box setting.