Rafael Pinot, Laurent Meunier, Florian Yger, Cédric Gouy-Pailler, Yann Chevaleyre, Jamal Atif: On the robustness of randomized classifiers to adversarial examples. Mach. Learn. 111(9): 3425-3457 (2022)