C. Zhao, P. T. Fletcher, M. Yu, Y. Peng, G. Zhang, and C. Shen, “The Adversarial Attack and Detection under the Fisher Information Metric”, AAAI, vol. 33, no. 01, pp. 5869-5876, Jul. 2019.