Adversarial Examples Are a Natural Consequence of Test Error in Noise
Benchmarking Neural Network Robustness to Common Corruptions and Surface Variations