Text this: Attack as defense: Characterizing adversarial examples using robustness

  ______     ___    __    __   _    _     _____   
 /_____//   / _ \\  \ \\ / // | || | ||  |__  //  
 `____ `   | / \ ||  \ \/ //  | || | ||    / //   
 /___//    | \_/ ||   \  //   | \\_/ ||   / //__  
 `__ `      \___//     \//     \____//   /_____|| 
 /_//       `---`       `       `---`    `-----`  
 `-`