Casper, S., Nadeau, M. & Kreiman, G. One thing to fool them all: generating interpretable, universal, and physically-realizable adversarial features. arXiv (2022). doi:10.48550/arXiv.2110.03605