@article{certifiedrobustnessagainstphysically,
  title = {Certified robustness against physically-realizable patch attack via randomized cropping},
  author = {Wan-Yi Lin and Fatemeh Sheikholeslami and Jinghao Shi and Leslie Rice and J Zico Kolter},
  year = {2021},
  url = {https://openreview.net/forum?id=vttv9ADGuWF},
}