Towards Defending against Adversarial Examples via Attack-Invariant Features - Dawei Zhou; Tongliang Liu; Bo Han; Nannan Wang; Chunlei Peng; Xinbo Gao (2021)