Under double-blind review
adversarial examples;adversarial training;universal perturbations;safety;deep learning
Universality, Robustness, and Detectability of Adversarial Perturbations under Adversarial Training