@article{scalinguptherandomizedgradientfree,
  title = {Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks},
  author = {Francesco Croce and Jonas Rauber and Matthias Hein},
  year = {2019},
  eprint = {1903.11359},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1903.11359v2},
}