@article{adversarialexamplesandwheretofindthem,
  title = {How to compare adversarial robustness of classifiers from a global perspective},
  author = {Niklas Risse and Christina Göpfert and Jan Philip Göpfert},
  year = {2020},
  eprint = {2004.10882},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2004.10882v2},
}