@article{detectingpatchadversarialattackswith,
  title = {Detecting Patch Adversarial Attacks with Image Residuals},
  author = {Marius Arvinte and Ahmed Tewfik and Sriram Vishwanath},
  year = {2020},
  eprint = {2002.12504},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2002.12504v2},
}