Before revision:  In this paper, we propose an evaluation framework to assess the quality of adversarial examples based on the aforementioned properties.
After revision:  In this paper, we propose an evaluation framework consisting of a set of automatic evaluation metrics and human evaluation guidelines, to rigorously assess the quality of adversarial examples based on the aforementioned properties.