Shafahi, Ali, Mahyar Najibi, Zheng Xu, John Dickerson, Larry S. Davis, and Tom Goldstein. 2020. “Universal Adversarial Training”. Proceedings of the AAAI Conference on Artificial Intelligence 34 (04):5636-43. https://doi.org/10.1609/aaai.v34i04.6017.