F. Croce, M. Andriushchenko, N. D. Singh, N. Flammarion, and M. Hein, “Sparse-RS: A Versatile Framework for Query-Efficient Sparse Black-Box Adversarial Attacks”, AAAI, vol. 36, no. 6, pp. 6437-6445, Jun. 2022.