H. Chang, “A Restricted Black-Box Adversarial Framework Towards Attacking Graph Embedding Models”, AAAI, vol. 34, no. 04, pp. 3389-3396, Apr. 2020.