Measuring the Transferability of $\ell_\infty$ Attacks by the $\ell_2$ Norm

Re-assign community