Xu, Qiuling, Guanhong Tao, Siyuan Cheng, and Xiangyu Zhang. 2021. “Towards Feature Space Adversarial Attack by Style Perturbation”. Proceedings of the AAAI Conference on Artificial Intelligence 35 (12):10523-31. https://ojs.aaai.org/index.php/AAAI/article/view/17259.