Xu, Q., Tao, G., Cheng, S., & Zhang, X. (2021). Towards Feature Space Adversarial Attack by Style Perturbation. Proceedings of the AAAI Conference on Artificial Intelligence, 35(12), 10523-10531. Retrieved from https://ojs.aaai.org/index.php/AAAI/article/view/17259