Automated Discovery of Adaptive Attacks on Adversarial Defenses - Yao, Chengyuan; Bielik, Pavol; Tsankov, Petar; Vechev, Martin (Advances in Neural Information Processing Systems, 2021)