Liu, Yu-An, et al. “Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 38, no. 8, Mar. 2024, pp. 8832-40, doi:10.1609/aaai.v38i8.28730.