Xu, Q.; Tao, G.; Cheng, S.; Zhang, X. Towards Feature Space Adversarial Attack by Style Perturbation. AAAI 2021, 35, 10523-10531.