The question applies to this field, not limited to this specific paper. It's already clear from the abstract that this is paper is doing it's own thing. But it

The question applies to this field, not limited to this specific paper. It's already clear from the abstract that this is paper is doing it's own thing. But it is still based on the phenomenon of adversarial examples.