Mao, X.; Chen, Y.; Wang, S.; Su, H.; He, Y.; Xue, H. Composite Adversarial Attacks. AAAI 2021, 35, 8884-8892.