A. Shafahi, M. Najibi, Z. Xu, J. Dickerson, L. S. Davis, and T. Goldstein, “Universal Adversarial Training”, AAAI, vol. 34, no. 04, pp. 5636-5643, Apr. 2020.