Levine, A. and Feizi, S. (2020) “Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation”, Proceedings of the AAAI Conference on Artificial Intelligence, 34(04), pp. 4585-4593. doi: 10.1609/aaai.v34i04.5888.