Shaham, et al.. Understanding Adversarial Training: Increasing Local Stability of Supervised Models Through Robust Optimization. Elsevier BV, 2018, doi:10.1016/j.neucom.2018.04.027.