@inproceedings{decisionbasedadversarialattacksreliable,
  title = {Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models},
  author = {Wieland Brendel and Jonas Rauber and Matthias Bethge},
  year = {2017},
  booktitle = {ICLR 2018 1},
  eprint = {1712.04248},
  archivePrefix = {arXiv},
  url = {http://arxiv.org/abs/1712.04248v2},
}