H. Liu, B. Peng, P. Ding, and D. Wang, “Rethinking Target Label Conditioning in Adversarial Attacks: A 2D Tensor-Guided Generative Approach”, AAAI, vol. 40, no. 9, pp. 7150–7158, Mar. 2026.