>Finally, not all SOTA methods are susceptible to adversarial attacks, eg capsule networks. They appear to be susceptible: https://arxiv.org/pdf/1906.03612.pdf
>Finally, not all SOTA methods are susceptible to adversarial attacks, eg capsule networks. They appear to be susceptible: https://arxiv.org/pdf/1906.03612.pdf