PAC-learning in the presence of evasion adversaries
Certifiable Distributional Robustness with Principled Adversarial Training