Potential adversarial samples for white-box attacks

Open in new window