Athalye, Anish, Logan Engstrom, Andrew Ilyas, and Kevin Kwok. Synthesizing robust adversarial examples In 35th International Conference on Machine Learning, PMLR. Vol. 80. Stockholm, Sweden, 2018.