adversarial inputs

3 papers