Mao, Xiaofeng, Yuefeng Chen, Shuhui Wang, Hang Su, Yuan He, and Hui Xue. 2021. “Composite Adversarial Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence 35 (10):8884-92. https://ojs.aaai.org/index.php/AAAI/article/view/17075.