@misc{indiciaefbd5c1b3eb84, title = {Detecting Patch Adversarial Attacks with Image Residuals}, author = {Marius Arvinte and Ahmed Tewfik and Sriram Vishwanath}, year = {2020}, url = {https://arxiv.org/abs/2002.12504}, note = {Source identifier: 2002.12504} }