Guo, C. et al. Adversarially trained neural representations may already be as robust as corresponding biological neural representations. arXiv (2022).