Zheng, Tianhang, Changyou Chen, and Kui Ren. 2019. “Distributionally Adversarial Attack”. Proceedings of the AAAI Conference on Artificial Intelligence 33 (01):2253-60. https://doi.org/10.1609/aaai.v33i01.33012253.