S. Fang, J. Li, X. Lin, and R. Ji, “Learning to Learn Transferable Attack”, AAAI, vol. 36, no. 1, pp. 571-579, Jun. 2022.