In papers on the robustness of neural networks, the concept of the ℓ norm ball is often used when generating perturbations. For example, ℓ norm balls involve ℓ1, ℓ2 and ℓ∞. May you recommend a survey paper on "Different Types of ℓ Norm Ball for Deep Learning"?