@misc{indiciae8bfac2024638, title = {Intriguing Properties of Adversarial ML Attacks in the Problem Space [Extended Version]}, author = {Jacopo Cortellazzi and Feargus Pendlebury and Daniel Arp and Erwin Quiring and Fabio Pierazzi and Lorenzo Cavallaro}, year = {2024}, url = {https://arxiv.org/abs/1911.02142}, note = {Source identifier: 1911.02142} }