1 INTRODUCTION  
2 BACKGROUND AND RELATED WORK  
3 THREAT MODEL AND TAXONOMIES OF ATTACKS AND DEFENSES  
4 ROBUSTNESS  
5 HYPOTHESES ON THE EXISTENCE OF ADVERSARIAL EXAMPLES  
6 ATTACKS  
7 DEFENSES  
8 TRANSFERABILITY  
9 DISCUSSION  
10 CONCLUSIONS AND FUTURE RESEARCH