Fan, J., and W. Li. “Adversarial Training and Provable Robustness: A Tale of Two Objectives”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 8, May 2021, pp. 7367-76, doi:10.1609/aaai.v35i8.16904.