Characterizing the Optimal 0-1 Loss for Multi-class Classification with a Test-time Attacker - Dai, Sihui; Ding, Wenxin; Bhagoji, Arjun Nitin; Cullina, Daniel; Zheng, Heather; Zhao, Ben; Mittal, Prateek (Advances in Neural Information Processing Systems, 2023)