Certified Defense to Image Transformations via Randomized Smoothing - Fischer, Marc; Baader, Maximilian; Vechev, Martin (Advances in Neural Information Processing Systems, 2020)