Adversarial Examples Might be A voidable: The Role of Data Concentration in Adversarial Robustness

However, these results can be too general to be applicable to natural data distributions. Indeed, humans are quite robust for tasks involving vision.