(De)Randomized Smoothing for Certifiable Defense against Patch Attacks - Levine, Alexander; Feizi, Soheil (Advances in Neural Information Processing Systems, 2020)