Isometric 3D Adversarial Examples in the Physical World Yibo Miao

Neural Information Processing Systems 

Based on Definitions 1 and 2, we have the following theorem.