Chen, Z.; Wang, Z.; Huang, J.-J.; Zhao, W.; Liu, X.; Guan, D. Imperceptible Adversarial Attack via Invertible Neural Networks. AAAI 2023, 37, 414-424.