Levine, Alexander, and Soheil Feizi. “Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation”. Proceedings of the AAAI Conference on Artificial Intelligence 34, no. 04 (April 3, 2020): 4585-4593. Accessed August 12, 2022. https://ojs.aaai.org/index.php/AAAI/article/view/5888.