Mao Ye, Chengyue Gong, Qiang Liu: SAFER: A Structure-free Approach for Certified Robustness to Adversarial Word Substitutions. ACL 2020: 3465-3475