adversarial examples, and demonstrate that there could be infinitely many such examples lying in convex polytopes

Open in new window