Publications

Can Adversarial Examples be Parsed to Reveal Victim Model Information?