(1)
Chavalit, S.; Lan, N. T.; Ndlovu, A. Robust Adversarial Training via Latent Perturbations. SIGAIR 2025, 2.