Fetching the paper…

Beyond Pixel Norm-Balls: Parametric Adversaries using an Analytically Differentiable Renderer · Around