Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks - Lin, Wei-An; Lau, Chun Pong; Levine, Alexander; Chellappa, Rama; Feizi, Soheil (Advances in Neural Information Processing Systems, 2020)