Idealised Bayesian Neural Networks Cannot Have Adversarial Examples: Theoretical and Empirical Study
A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples