Fang, S.; Li, J.; Lin, X.; Ji, R. Learning to Learn Transferable Attack. AAAI 2022, 36, 571-579.