Ye, Xu, Liu, Lambrechts, Zhang, Zhou, Ma, Wang, Lin, 2021. Adversarial Robustness vs Model Compression, or Both?.