(1610.08401) Universal adversarial perturbations