How many dimensions are required to find an adversarial example?

Open in new window