P. Yang, J. Chen, C.-J. Hsieh, J.-L. Wang, and M. Jordan, “ML-LOO: Detecting Adversarial Examples with Feature Attribution”, AAAI, vol. 34, no. 04, pp. 6639-6647, Apr. 2020.