M. Terzi, A. Achille, M. Maggipinto, and G. A. Susto, “Adversarial Training Reduces Information and Improves Transferability”, AAAI, vol. 35, no. 3, pp. 2674-2682, May 2021.