Analysis of universal adversarial perturbations
On the Number of Linear Regions of Deep Neural Networks