Li, M. (2022) “Learning Universal Adversarial Perturbation by Adversarial Example”, Proceedings of the AAAI Conference on Artificial Intelligence, 36(2), pp. 1350–1358. doi: 10.1609/aaai.v36i2.20023.