B. Huang, Z. Ke, Y. Wang, W. Wang, L. Shen, and F. Liu, “Adversarial Defence by Diversified Simultaneous Training of Deep Ensembles”, AAAI, vol. 35, no. 9, pp. 7823-7831, May 2021.