Yang, P.; Chen, J.; Hsieh, C.-J.; Wang, J.-L.; Jordan, M. ML-LOO: Detecting Adversarial Examples With Feature Attribution. AAAI 2020, 34, 6639-6647.