Chen, P.-Y.; Liu, S. Holistic Adversarial Robustness of Deep Learning Models. AAAI 2023, 37, 15411-15420.