"Functional Adversarial Attacks."

Cassidy Laidlaw, Soheil Feizi (2019)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics