Kenneth T. Co, David Martínez-Rego, Emil C. Lupu: Jacobian Regularization for Mitigating Universal Adversarial Perturbations. ICANN (4) 2021: 202-213