Fetching the paper…

Logit Pairing Methods Can Fool Gradient-Based Attacks · Around