Yinpeng Dong, Zhijie Deng, Tianyu Pang, Jun Zhu, Hang Su: Adversarial Distributional Training for Robust Deep Learning. NeurIPS 2020