P.-Y. Chen and S. Liu, “Holistic Adversarial Robustness of Deep Learning Models”, AAAI, vol. 37, no. 13, pp. 15411-15420, Sep. 2023.