Robustness of classifiers: from adversarial to random noise - Alhussein Fawzi; Seyed-Mohsen Moosavi-Dezfooli; Pascal Frossard (2016)