@inproceedings{outputdiversifiedinitializationfor,
  title = {Diversity can be Transferred: Output Diversification for White- and Black-box Attacks},
  author = {Yusuke Tashiro and Yang song and Stefano Ermon},
  year = {2020},
  booktitle = {NeurIPS 2020 12},
  eprint = {2003.06878},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2003.06878v3},
}