Shafahi, A.; Najibi, M.; Xu, Z.; Dickerson, J.; Davis, L. S.; Goldstein, T. Universal Adversarial Training. AAAI 2020, 34, 5636-5643.