Huang, B.; Ke, Z.; Wang, Y.; Wang, W.; Shen, L.; Liu, F. Adversarial Defence by Diversified Simultaneous Training of Deep Ensembles. AAAI 2021, 35, 7823-7831.