https://123dok.org/document/7q04vvvz-formalizing-evasion-attacks-against-machine-learning-security-detectors.html