P. Hlihor, R. Volpi, and L. Malagò, “Evaluating the Robustness of Defense Mechanisms based on AutoEncoder Reconstructions against Carlini-Wagner Adversarial Attacks”, nldl, vol. 1, p. 6, Feb. 2020.