A Theoretical Framework for Robustness of (Deep) Classifiers against Adversarial Examples
Fundamental limits on adversarial robustness