Towards Deep Learning Models Resistant to Adversarial Attacks, Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, Adrian Vladu, 2018International Conference on Learning Representations (ICLR)DOI: 10.48550/arXiv.1706.06083 - This foundational paper introduces PGD adversarial training, a benchmark defense, and details the PGD attack, setting an early standard for evaluating robustness against a strong white-box adversary.