J. Liang, H. Liu, and C.-M. Pun, “OTI: A Model-free and Visually Interpretable Measure of Image Attackability”, AAAI, vol. 40, no. 9, pp. 6826–6834, Mar. 2026.