Zheng, T.; Chen, C.; Ren, K. Distributionally Adversarial Attack. AAAI 2019, 33, 2253-2260.