He, X.; Yang, S.; Li, G.; Li, H.; Chang, H.; Yu, Y. Non-Local Context Encoder: Robust Biomedical Image Segmentation Against Adversarial Attacks. AAAI 2019, 33, 8417-8424.