Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences - Lyu, Saiyue; Shaikh, Shadab; Shpilevskiy, Frederick; Shelhamer, Evan; Lécuyer, Mathias (Advances in Neural Information Processing Systems, 2024)