Y.-A. Liu, “Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off”, AAAI, vol. 38, no. 8, pp. 8832-8840, Mar. 2024.