@misc{indiciae978b12df4bc5,
  title = {Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Size},
  author = {Ian Goodfellow},
  year = {2018},
  url = {https://arxiv.org/abs/1804.07870},
  note = {Source identifier: 1804.07870}
}