Wu, Y.; Arora, S. S.; Wu, Y.; Yang, H. Beating Attackers At Their Own Games: Adversarial Example Detection Using Adversarial Gradient Directions. AAAI 2021, 35, 2969-2977.