Encoding Robustness to Image Style via Adversarial Feature Perturbations - Shu, Manli; Wu, Zuxuan; Goldblum, Micah; Goldstein, Tom (Advances in Neural Information Processing Systems, 2021)