R. Wang, Y. Guo, and Y. Wang, “AGS: Affordable and Generalizable Substitute Training for Transferable Adversarial Attack”, AAAI, vol. 38, no. 6, pp. 5553–5562, Mar. 2024.