@article{notallbrokendefensesareequalthedead,
  title = {How many perturbations break this model? Evaluating robustness beyond adversarial accuracy},
  author = {Raphael Olivier and Bhiksha Raj},
  year = {2022},
  eprint = {2207.04129},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2207.04129v3},
}