Adversarial Attacks are Reversible with Natural Supervision - Chengzhi Mao; Mia Chiquer; Hao Wang; Junfeng Yang; Carl Vondrick (2021)