Li, Y.; Bai, S.; Zhou, Y.; Xie, C.; Zhang, Z.; Yuille, A. Learning Transferable Adversarial Examples via Ghost Networks. AAAI 2020, 34, 11458-11465.