@ARTICLE{SriNN21,
  author = {Vignesh Srinivasan and Arturo Marban and Klaus-Robert M{\"u}ller and Wojciech Samek and Shinichi Nakajima},
  title = {Robustifying Models Against Adversarial Attacks by Langevin Dynamics},
  journal = {Neural Networks},
  year = {2021},
  volume = {137},
  pages = {1-17},
  doi = {10.1016/j.neunet.2020.12.024},
  url = {https://doi.org/10.1016/j.neunet.2020.12.024}
}