@inproceedings{adversarialtrainingandrobustnessfor,
  title = {Adversarial Training and Robustness for Multiple Perturbations},
  author = {Florian Tramèr and Dan Boneh},
  year = {2019},
  booktitle = {NeurIPS 2019 12},
  eprint = {1904.13000},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1904.13000v2},
}