T. Tsai, K. Yang, T.-Y. Ho, and Y. Jin, “Robust Adversarial Objects against Deep Learning Models”, AAAI, vol. 34, no. 01, pp. 954-962, Apr. 2020.