@article{detectingandrecoveringadversarialexample,
  title = {Are L2 adversarial examples intrinsically different?},
  author = {Mingxuan Li and Jingyuan Wang and Yufan Wu},
  year = {2020},
  eprint = {2002.12527},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2002.12527v2},
}