Jacobian norm with Selective Input Gradient Regularization for interpretable adversarial defense - Xianghua Xie (Pattern Recognition, 2024)