Most ReLU Networks Suffer from $\ell^2$ Adversarial Perturbations

Open in new window