

@ARTICLE{BP,
  author={Zhang, Hanwei and Avrithis, Yannis and Furon, Teddy and Amsaleg, Laurent},
  journal={IEEE Transactions on Information Forensics and Security}, 
  title={Walking on the Edge: Fast, Low-Distortion Adversarial Examples}, 
  year={2021}}

@article{fmna,
  author = {Pintor, Maura and Roli, Fabio and Brendel, Wieland and Biggio, Battista},
  title = {Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints},
  booktitle = {NeurIPS},
  year = {2021}
}

@INPROCEEDINGS{carlini_wagner,
  author={Carlini, Nicholas and Wagner, David},
  booktitle={2017 IEEE Symposium on Security and Privacy (SP)}, 
  title={Towards Evaluating the Robustness of Neural Networks}, 
  year={2017}}
