Yang, Z.; Xu, Z.; Zhang, J.; Hartley, R.; Tu, P. Adversarial Purification With the Manifold Hypothesis. AAAI 2024, 38, 16379-16387.