Zeng, H., C. Zhu, T. Goldstein, and F. Huang. “Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-Uniform Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 12, May 2021, pp. 10815-23, https://ojs.aaai.org/index.php/AAAI/article/view/17292.