@article{whydoadversarialattackstransfer,
  title = {Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks},
  author = {Ambra Demontis and Marco Melis and Maura Pintor and Matthew Jagielski and Battista Biggio and Alina Oprea and Cristina Nita-Rotaru and Fabio Roli},
  year = {2018},
  eprint = {1809.02861},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1809.02861v4},
}