Adversarial Examples Target Topological Holes in Deep Networks
The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure