Mao, X., Chen, Y., Wang, S., Su, H., He, Y. and Xue, H. (2021) “Composite Adversarial Attacks”, Proceedings of the AAAI Conference on Artificial Intelligence, 35(10), pp. 8884-8892. doi: 10.1609/aaai.v35i10.17075.