@misc{indiciae865a0bf1912c, title = {Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference}, author = {Yang Zheng and Xiaoyi Feng and Zhaoqiang Xia and Xiaoyue Jiang and Ambra Demontis and Maura Pintor and Battista Biggio and Fabio Roli}, year = {2023}, url = {https://arxiv.org/abs/2108.11673}, note = {Source identifier: 2108.11673} }