Universal Adversarial Perturbations Against Semantic Image Segmentation
Towards Evaluating the Robustness of Neural Networks