Levine, Alexander, and Soheil Feizi. 2020. “Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation”. Proceedings of the AAAI Conference on Artificial Intelligence 34 (04):4585-93. https://doi.org/10.1609/aaai.v34i04.5888.