N. Ye, Q. Li, X.-Y. Zhou, and Z. Zhu, “Amata: An Annealing Mechanism for Adversarial Training Acceleration”, AAAI, vol. 35, no. 12, pp. 10691-10699, May 2021.