C. Zhang, P. Benz, A. Karjauv, and I. S. Kweon, “Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards a Fourier Perspective”, AAAI, vol. 35, no. 4, pp. 3296-3304, May 2021.