Z. Chen, Z. Wang, J.-J. Huang, W. Zhao, X. Liu, and D. Guan, “Imperceptible Adversarial Attack via Invertible Neural Networks”, AAAI, vol. 37, no. 1, pp. 414-424, Jun. 2023.