G. Rossolini, F. Nesti, F. Brau, A. Biondi, and G. Buttazzo, “Defending from Physically-Realizable Adversarial Attacks through Internal Over-Activation Analysis”, AAAI, vol. 37, no. 12, pp. 15064-15072, Jun. 2023.