@article{patchguardprovabledefenseagainst,
  title = {PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking},
  author = {Chong Xiang and Arjun Nitin Bhagoji and Vikash Sehwag and Prateek Mittal},
  year = {2020},
  eprint = {2005.10884},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2005.10884v5},
}