Understanding and Improving Ensemble Adversarial Defense - Deng, Yian; Mu, Tingting (Advances in Neural Information Processing Systems, 2023)