L. Ding, “Towards Universal Physical Attacks on Single Object Tracking”, AAAI, vol. 35, no. 2, pp. 1236-1245, May 2021.