Qin, Y., Xiong, Y., Yi, J., & Hsieh, C.-J. (2023). Training Meta-Surrogate Model for Transferable Adversarial Attack. Proceedings of the AAAI Conference on Artificial Intelligence, 37(8), 9516-9524. https://doi.org/10.1609/aaai.v37i8.26139