S. Chavalit, N. T. Lan, and A. Ndlovu, “Robust Adversarial Training via Latent Perturbations”, SIGAIR, vol. 2, no. 1, Aug. 2025.