Analysis of classifiers’ robustness to adversarial perturbations
A robust minimax approach to classification