Yang Zheng, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Ambra Demontis, Maura Pintor, Battista Biggio, Fabio Roli. Why adversarial reprogramming works, when it fails, and how to tell the difference. Inf. Sci., 632:130-143, 2023. [doi]
Abstract is missing.