Universal Adversarial Perturbations
Learning with a Strong Adversary