@misc{indiciae9d4b0336efcf, title = {Mind the box: \$l\_1\$-APGD for sparse adversarial attacks on image classifiers}, author = {Francesco Croce and Matthias Hein}, year = {2023}, url = {https://arxiv.org/abs/2103.01208}, note = {Source identifier: 2103.01208} }