Denoised Smoothing: A Provable Defense for Pretrained Classifiers - Salman, Hadi; Sun, Mingjie; Yang, Greg; Kapoor, Ashish; Kolter, J. Zico (Advances in Neural Information Processing Systems, 2020)