R. Maheshwary, S. Maheshwary, and V. Pudi, “Generating Natural Language Attacks in a Hard Label Black Box Setting”, AAAI, vol. 35, no. 15, pp. 13525-13533, May 2021.