Wei-An Lin, Chun Pong Lau, Alexander Levine, Rama Chellappa, Soheil Feizi: Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks. NeurIPS 2020