Rossolini, G.; Nesti, F.; Brau, F.; Biondi, A.; Buttazzo, G. Defending from Physically-Realizable Adversarial Attacks through Internal Over-Activation Analysis. AAAI 2023, 37, 15064-15072.