Fan, Jiameng, and Wenchao Li. 2021. “Adversarial Training and Provable Robustness: A Tale of Two Objectives”. Proceedings of the AAAI Conference on Artificial Intelligence 35 (8):7367-76. https://ojs.aaai.org/index.php/AAAI/article/view/16904.