Transfer of adversarial robustness between perturbation types

Read on openai.com