H. Chen and Y. Ji, “Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation”, AAAI, vol. 36, no. 10, pp. 10463-10472, Jun. 2022.