T. Zheng, C. Chen, and K. Ren, “Distributionally Adversarial Attack”, AAAI, vol. 33, no. 01, pp. 2253-2260, Jul. 2019.