@article{improvingwhiteboxrobustnessofpre,
  title = {Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training},
  author = {Dawei Zhou and Nannan Wang and Xinbo Gao and Bo Han and Jun Yu and Xiaoyu Wang and Tongliang Liu},
  year = {2021},
  eprint = {2106.05453},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2106.05453v2},
}