Obfuscated Gradients Give a False Sense of Security : Circumventing Defenses to Adversarial Examples Supplementary Material 1 Local Intrinsic Dimensionality

2018