Chen, Y.; Zhu, X. Optimal Attack Against Autoregressive Models by Manipulating the Environment. AAAI 2020, 34, 3545-3552.