@article{detectingadversarialexamplesisnearlyas,
  title = {Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them},
  author = {Florian Tramèr},
  year = {2021},
  eprint = {2107.11630},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2107.11630v2},
}