Shafahi, A., M. Najibi, Z. Xu, J. Dickerson, L. S. Davis, and T. Goldstein. “Universal Adversarial Training”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 34, no. 04, Apr. 2020, pp. 5636-43, doi:10.1609/aaai.v34i04.6017.