Weng, J.; Luo, Z.; Zhong, Z.; Lin, D.; Li, S. Exploring Non-Target Knowledge for Improving Ensemble Universal Adversarial Attacks. AAAI 2023, 37, 2768-2775.