Liu Y-A, Zhang R, Zhang M, Chen W, de Rijke M, Guo J, Cheng X. Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off. AAAI [Internet]. 2024Mar.24 [cited 2024Oct.3];38(8):8832-40. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/28730