Z. Wang, L. Wang, Z. Wen, and C. Wang, “Beyond Single-Point Perturbation: A Hierarchical, Manifold-Aware Approach to Diffusion Attacks”, AAAI, vol. 40, no. 12, pp. 10421–10429, Mar. 2026.