OpenAI: Adversarial robustness can transfer between perturbation types | SignalBreak | SignalBreak