Fetching the paper…

Should Adversarial Attacks Use Pixel p-Norm? · Around