Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization - Lin, Guang; Li, Chao; Zhang, Jianhai; Tanaka, Toshihisa; Zhao, Qibin (International Conference on Learning Representations, 2024)