Rao, S., Stutz, D., & Schiele, B. (2020). Adversarial Training Against Location-Optimized Adversarial Patches [Conference paper]. Computer Vision -- ECCV 2020 Workshops, 429–448. https://doi.org/10.1007/978-3-030-68238-5_32