Liang Y, Huang D. Large Norms of CNN Layers Do Not Hurt Adversarial Robustness. AAAI [Internet]. 2021May18 [cited 2024Apr.25];35(10):8565-73. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/17039