 On Neural Network approximation of ideal adversarial attack and
convergence of adversarial trainingSIAM Journal on Mathematics of Data Science (SIMODS), 2023 |
 Holistic Deep LearningMachine-mediated learning (ML), 2021 |
 Capsule Network is Not More Robust than Convolutional NetworkComputer Vision and Pattern Recognition (CVPR), 2021 |
