@misc{indiciaed158e27ec0d5, title = {Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates}, author = {Amin Ghiasi and Ali Shafahi and Tom Goldstein}, year = {2020}, url = {https://arxiv.org/abs/2003.08937}, note = {Source identifier: 2003.08937} }