Fan J, Li W. Adversarial Training and Provable Robustness: A Tale of Two Objectives. AAAI [Internet]. 2021 May 18 [cited 2026 May 29];35(8):7367-76. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/16904