B. Li and W. Liu, “WAT: Improve the Worst-Class Robustness in Adversarial Training”, AAAI, vol. 37, no. 12, pp. 14982-14990, Jun. 2023.