Zeng, Huimin, Chen Zhu, Tom Goldstein, and Furong Huang. “Are Adversarial Examples Created Equal? A Learnable Weighted Minimax Risk for Robustness under Non-Uniform Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence 35, no. 12 (May 18, 2021): 10815-10823. Accessed January 22, 2022. https://ojs.aaai.org/index.php/AAAI/article/view/17292.