Y. Wu, S. S. Arora, Y. Wu, and H. Yang, “Beating Attackers At Their Own Games: Adversarial Example Detection Using Adversarial Gradient Directions”, AAAI, vol. 35, no. 4, pp. 2969-2977, May 2021.