Zhang, J., Sang, J., Yi, Q., Yang, Y., Dong, H., & Yu, J. (2023). ImageNet Pre-training Also Transfers Non-robustness. Proceedings of the AAAI Conference on Artificial Intelligence, 37(3), 3436-3444. https://doi.org/10.1609/aaai.v37i3.25452