Cheng, X.; Zhang, H.; Xin, Y.; Shen, W.; Zhang, Q. Clarifying the Behavior and the Difficulty of Adversarial Training. AAAI 2024, 38, 11507-11515.