C. Meyers, T. Löfstedt, and E. Elmroth, “Massively Parallel Evasion Attacks and the Pitfalls of Adversarial Retraining”, EAI Endorsed Trans IoT, vol. 10, Jul. 2024.