X. He, S. Yang, G. Li, H. Li, H. Chang, and Y. Yu, “Non-Local Context Encoder: Robust Biomedical Image Segmentation against Adversarial Attacks”, AAAI, vol. 33, no. 01, pp. 8417-8424, Jul. 2019.