Levine, A., and S. Feizi. “Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 34, no. 04, Apr. 2020, pp. 4585-93, doi:10.1609/aaai.v34i04.5888.