@inproceedings{adversarialexamplesarenotrealfeatures1,
  title = {Adversarial Examples Are Not Real Features},
  author = {Ang Li and Yifei Wang and Yiwen Guo and Yisen Wang},
  year = {2023},
  booktitle = {NeurIPS 2023 11},
  eprint = {2310.18936},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2310.18936v4},
}