X. Cheng, H. Zhang, Y. Xin, W. Shen, and Q. Zhang, “Clarifying the Behavior and the Difficulty of Adversarial Training”, AAAI, vol. 38, no. 10, pp. 11507–11515, Mar. 2024.