Mao, X., Chen, Y., Wang, S., Su, H., He, Y., & Xue, H. (2021). Composite Adversarial Attacks. Proceedings of the AAAI Conference on Artificial Intelligence, 35(10), 8884-8892. https://doi.org/10.1609/aaai.v35i10.17075