P. Zimmer and G. Karame, “Tuning for Two Adversaries: Enhancing the Robustness Against Transfer and Query-Based Attacks Using Hyperparameter Tuning”, AAAI, vol. 40, no. 16, pp. 14049–14058, Mar. 2026.