Robustness of classifiers: from adversarial to random noise

Alhussein Fawzi, Seyed-Mohsen Moosavi-Dezfooli, Pascal Frossard

Neural Information Processing Systems 

This result suggests bounds on the curvature of the classifiers' decision boundaries that we support