@article{whyadversarialreprogrammingworkswhenit,
  title = {Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference},
  author = {Yang Zheng and Xiaoyi Feng and Zhaoqiang Xia and Xiaoyue Jiang and Ambra Demontis and Maura Pintor and Battista Biggio and Fabio Roli},
  year = {2021},
  eprint = {2108.11673},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2108.11673v3},
}