Xu, Q., Tao, G., Cheng, S., & Zhang, X. (2021). Towards Feature Space Adversarial Attack by Style Perturbation. Proceedings of the AAAI Conference on Artificial Intelligence, 35(12), 10523-10531. https://doi.org/10.1609/aaai.v35i12.17259