@misc{W2963564844,
  author = {Nicholas Carlini and David Wagner},
  title = {Adversarial Examples Are Not Easily Detected},
  year = {2017},
  doi = {https://doi.org/10.1145/3128572.3140444}
}