Robustifying models against adversarial attacks by Langevin dynamics - Shinichi Nakajima; Arturo Marban; Vignesh Srinivasan; Csaba Rohrer; Klaus-Robert Müller; Wojciech Samek (Neural Networks, 2021)