@inproceedings{adversarialexamplesthatfoolbothcomputer,
  title = {Adversarial Examples that Fool both Computer Vision and Time-Limited Humans},
  author = {Gamaleldin F. Elsayed and Shreya Shankar and Brian Cheung and Nicolas Papernot and Alex Kurakin and Ian Goodfellow and Jascha Sohl-Dickstein},
  year = {2018},
  booktitle = {NeurIPS 2018 12},
  eprint = {1802.08195},
  archivePrefix = {arXiv},
  url = {http://arxiv.org/abs/1802.08195v3},
}