F. Yang, “Learning to Attack Real-World Models for Person Re-identification via Virtual-Guided Meta-Learning”, AAAI, vol. 35, no. 4, pp. 3128-3135, May 2021.