@article{aregenerativeclassifiersmorerobustto,
  title = {Are Generative Classifiers More Robust to Adversarial Attacks?},
  author = {Yingzhen Li and John Bradshaw and Yash Sharma},
  year = {2018},
  eprint = {1802.06552},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1802.06552v3},
}