@misc{indiciae88bc03a48c40,
  title = {Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks},
  author = {Francesco Croce and Jonas Rauber and Matthias Hein},
  year = {2019},
  url = {https://arxiv.org/abs/1903.11359},
  note = {Source identifier: 1903.11359}
}