@misc{indiciae21742e8ae010,
  title = {On Adaptive Attacks to Adversarial Example Defenses},
  author = {Florian Tramer and Nicholas Carlini and Wieland Brendel and Aleksander Madry},
  year = {2020},
  url = {https://arxiv.org/abs/2002.08347},
  note = {Source identifier: 2002.08347}
}