Ho, J., Lee, B., & Kang, D. (2022). Attack-less adversarial training for a robust adversarial defense. Applied Intelligence, 52, 4364–4381