E. Rothberg, T. Chen, and H. Ji, “Towards Better Accuracy and Robustness with Localized Adversarial Training”, AAAI, vol. 33, no. 01, pp. 10017-10018, Jul. 2019.