Chen, Yiding, and Xiaojin Zhu. 2020. “Optimal Attack Against Autoregressive Models by Manipulating the Environment”. Proceedings of the AAAI Conference on Artificial Intelligence 34 (04):3545-52. https://doi.org/10.1609/aaai.v34i04.5760.