@misc{indiciaed400cde159e4, title = {Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers}, author = {Jacob M. Springer and Melanie Mitchell and Garrett T. Kenyon}, year = {2021}, url = {https://arxiv.org/abs/2102.05110}, note = {Source identifier: 2102.05110} }