Bai Li, Changyou Chen, Wenlin Wang, Lawrence Carin: Certified Adversarial Robustness with Additive Noise. NeurIPS 2019: 9459-9469