J. Weng, Z. Luo, Z. Zhong, D. Lin, and S. Li, “Exploring Non-target Knowledge for Improving Ensemble Universal Adversarial Attacks”, AAAI, vol. 37, no. 3, pp. 2768–2775, Jun. 2023.