Semantic adversarial robustness with differentiable ray-tracing

NeurIPS 2020