Zhang, J., J. Sang, Q. Yi, Y. Yang, H. Dong, and J. Yu. “ImageNet Pre-Training Also Transfers Non-Robustness”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, no. 3, June 2023, pp. 3436-44, doi:10.1609/aaai.v37i3.25452.