TY - RPRT TI - Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Size AU - Ian Goodfellow PY - 2018 UR - https://arxiv.org/abs/1804.07870 ID - 1804.07870 ER -