Adversarial Training and Robustness for Multiple Perturbations - Tramer, Florian; Boneh, Dan (Advances in Neural Information Processing Systems, 2019)