B. Luo, Y. Liu, L. Wei, and Q. Xu, “Towards Imperceptible and Robust Adversarial Example Attacks Against Neural Networks”, AAAI, vol. 32, no. 1, Apr. 2018.