Liu, S.; Peng, F.; Tang, K. Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles. AAAI 2023, 37, 8852-8860.