@article{adaptivetesttimedefensewiththemanifold,
  title = {Adversarial Purification with the Manifold Hypothesis},
  author = {Zhaoyuan Yang and Zhiwei Xu and Jing Zhang and Richard Hartley and Peter Tu},
  year = {2022},
  eprint = {2210.14404},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2210.14404v5},
}