P. Ghosh, A. Losalka, and M. J. Black, “Resisting Adversarial Attacks Using Gaussian Mixture Variational Autoencoders”, AAAI, vol. 33, no. 01, pp. 541-548, Jul. 2019.