@article{realattackersdontcomputegradients,
  title = {"Real Attackers Don't Compute Gradients": Bridging the Gap Between Adversarial ML Research and Practice},
  author = {Giovanni Apruzzese and Hyrum S. Anderson and Savino Dambra and David Freeman and Fabio Pierazzi and Kevin A. Roundy},
  year = {2022},
  eprint = {2212.14315},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2212.14315v1},
}