Fan, J., and W. Li. “Adversarial Training and Provable Robustness: A Tale of Two Objectives”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 8, May 2021, pp. 7367-76, https://ojs.aaai.org/index.php/AAAI/article/view/16904.