Effect of transformations on the success of adversarial attacks for Clipped BagNet and ResNet image classifiers
Trudy Instituta sistemnogo programmirovaniâ RAN/Trudy Instituta sistemnogo programmirovaniâ