Liang, Y., and D. Huang. “Large Norms of CNN Layers Do Not Hurt Adversarial Robustness”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 10, May 2021, pp. 8565-73, doi:10.1609/aaai.v35i10.17039.