Zhao, P.; Chen, P.- yu; Wang, S.; Lin, X. Towards Query-Efficient Black-Box Adversary With Zeroth-Order Natural Gradient Descent. AAAI 2020, 34, 6909-6916.