Z. Yang, Z. Xu, J. Zhang, R. Hartley, and P. Tu, “Adversarial Purification with the Manifold Hypothesis”, AAAI, vol. 38, no. 15, pp. 16379-16387, Mar. 2024.