H. Zeng, C. Zhu, T. Goldstein, and F. Huang, “Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-uniform Attacks”, AAAI, vol. 35, no. 12, pp. 10815-10823, May 2021.