Salman, Yang, Li, Zhang, Zhang, Razenshteyn, Bubeck, 2020. Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers.