Fan, J., & Li, W. (2021). Adversarial Training and Provable Robustness: A Tale of Two Objectives. Proceedings of the AAAI Conference on Artificial Intelligence, 35(8), 7367-7376. https://doi.org/10.1609/aaai.v35i8.16904