@article{patchcleansercertifiablyrobustdefense,
  title = {PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier},
  author = {Chong Xiang and Saeed Mahloujifar and Prateek Mittal},
  year = {2021},
  eprint = {2108.09135},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2108.09135v2},
}