Levine, A., & Feizi, S. (2020). Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation. Proceedings of the AAAI Conference on Artificial Intelligence, 34(04), 4585-4593. https://doi.org/10.1609/aaai.v34i04.5888