Diversity can be Transferred: Output Diversification for White- and Black-box Attacks - Tashiro, Yusuke; Song, Yang; Ermon, Stefano (Advances in Neural Information Processing Systems, 2020)