Adversarial Risk and the Dangers of Evaluating Against Weak Attacks
Adversarial examples in the physical world