(1)
Yang, Z.; Han, Y.; Zhang, X. Characterizing the Evasion Attackability of Multi-Label Classifiers. AAAI 2021, 35, 10647-10655.