Wang, R., Guo, Y., & Wang, Y. (2024). AGS: Affordable and Generalizable Substitute Training for Transferable Adversarial Attack. Proceedings of the AAAI Conference on Artificial Intelligence, 38(6), 5553–5562. https://doi.org/10.1609/aaai.v38i6.28365