SupplementaryMaterialforAdversarialRobustness with Non-uniformPerturbations