<hi xmlns="http://www.tei-c.org/ns/1.0" rend="bold"> Ilyas, A. / Santurkar, S. / Tsipras, D. / Engstrom, L. / Tran, B. / Madry, A.</hi> (2019): Adversarial examples are not bugs, they are features. arXiv preprint arXiv:1905.02175.