Intriguing Properties of Adversarial Examples

   Abstract