Evaluating Robustness of Neural Networks with Mixed Integer Programming
Ground-Truth Adversarial Examples