Zhao, C.; Fletcher, P. T.; Yu, M.; Peng, Y.; Zhang, G.; Shen, C. The Adversarial Attack and Detection under the Fisher Information Metric. AAAI 2019, 33, 5869-5876.