S. Liu, F. Peng, and K. Tang, “Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles”, AAAI, vol. 37, no. 7, pp. 8852–8860, Jun. 2023.