Li, M.; Yang, Y.; Wei, K.; Yang, X.; Huang, H. Learning Universal Adversarial Perturbation by Adversarial Example. AAAI 2022, 36, 1350-1358.