Interpreting Adversarial Robustness: A View from Decision Surface in Input Space
The Limitations of Deep Learning in Adversarial Settings