Zeng, H.; Zhu, C.; Goldstein, T.; Huang, F. Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-Uniform Attacks. AAAI 2021, 35, 10815-10823.