Shafahi, Ali, Mahyar Najibi, Zheng Xu, John Dickerson, Larry S. Davis, and Tom Goldstein. “Universal Adversarial Training”. Proceedings of the AAAI Conference on Artificial Intelligence 34, no. 04 (April 3, 2020): 5636-5643. Accessed August 15, 2022. https://ojs.aaai.org/index.php/AAAI/article/view/6017.