adversarial noise

3 papers