Xu, Q. (2021) “Towards Feature Space Adversarial Attack by Style Perturbation”, Proceedings of the AAAI Conference on Artificial Intelligence, 35(12), pp. 10523–10531. doi: 10.1609/aaai.v35i12.17259.