Y. K. Singla, S. Parekh, S. Singh, C. Chen, B. Krishnamurthy, and R. R. Shah, “MINIMAL: Mining Models for Universal Adversarial Triggers”, AAAI, vol. 36, no. 10, pp. 11330–11339, Jun. 2022.