@inproceedings{bigbutimperceptibleadversarial,
  title = {Unrestricted Adversarial Examples via Semantic Manipulation},
  author = {Anand Bhattad and Min Jin Chong and Kaizhao Liang and Bo Li and D. A. Forsyth},
  year = {2019},
  booktitle = {ICLR 2020 1},
  eprint = {1904.06347},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1904.06347v2},
}