Measuring the Transferability of ℓ∞ Attacks by the ℓ2 Norm | IEEE Conference Publication | IEEE Xplore