Zimmer P, Andreina S, Marson GA, Karame G. Closing the Gap: Achieving Better Accuracy-Robustness Tradeoffs against Query-Based Attacks. AAAI [Internet]. 2024Mar.24 [cited 2024Jun.11];38(19):21859-68. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/30187