Our paper Probabilistic Categorical Adversarial Attack & Adversarial Training is accepted to ICML2023.