Zhang, C., Benz, P., Karjauv, A., & Kweon, I. S. (2021). Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards a Fourier Perspective. Proceedings of the AAAI Conference on Artificial Intelligence, 35(4), 3296-3304. Retrieved from https://ojs.aaai.org/index.php/AAAI/article/view/16441