Liang, Y., & Huang, D. (2021). Large Norms of CNN Layers Do Not Hurt Adversarial Robustness. Proceedings of the AAAI Conference on Artificial Intelligence, 35(10), 8565-8573. https://doi.org/10.1609/aaai.v35i10.17039