Random Normalization Aggregation for Adversarial Defense - Dong, Minjing; Chen, Xinghao; Wang, Yunhe; Xu, Chang (Advances in Neural Information Processing Systems, 2022)