Qin, Y.; Xiong, Y.; Yi, J.; Hsieh, C.-J. Training Meta-Surrogate Model for Transferable Adversarial Attack. AAAI 2023, 37, 9516-9524.