H. Phan, Y. Xie, S. Liao, J. Chen, and B. Yuan, “CAG: A Real-Time Low-Cost Enhanced-Robustness High-Transferability Content-Aware Adversarial Attack Generator”, AAAI, vol. 34, no. 04, pp. 5412-5419, Apr. 2020.