Weng, J., Luo, Z., Zhong, Z., Lin, D., & Li, S. (2023). Exploring Non-target Knowledge for Improving Ensemble Universal Adversarial Attacks. Proceedings of the AAAI Conference on Artificial Intelligence, 37(3), 2768–2775. https://doi.org/10.1609/aaai.v37i3.25377