@article{enhancingtransformationbaseddefenses1,
  title = {Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations},
  author = {Haimin Zhang and Min Xu},
  year = {2021},
  eprint = {2103.04565},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2103.04565v3},
}