[1]
M. Li, Y. Yang, K. Wei, X. Yang, and H. Huang, “Learning Universal Adversarial Perturbation by Adversarial Example”, AAAI, vol. 36, no. 2, pp. 1350-1358, Jun. 2022.