Less is More: Dimension Reduction Finds On-manifold Adversarial Examples in Hard-Label Attacks
BSD 3-Clause "New" or "Revised" LicenseBSD-3-Clause