Analysis of universal adversarial perturbations
Robustness of classifiers: from adversarial to random noise