Y. Qin, Y. Xiong, J. Yi, and C.-J. Hsieh, “Training Meta-Surrogate Model for Transferable Adversarial Attack”, AAAI, vol. 37, no. 8, pp. 9516-9524, Jun. 2023.