Defending Against Universal Attack Via Curvature-Aware Category Adversarial Training | IEEE Conference Publication | IEEE Xplore