Yang, Z., Han, Y., & Zhang, X. (2021). Characterizing the Evasion Attackability of Multi-label Classifiers. Proceedings of the AAAI Conference on Artificial Intelligence, 35(12), 10647-10655. https://doi.org/10.1609/aaai.v35i12.17273