X. Y. Lee, S. Ghadai, K. L. Tan, C. Hegde, and S. Sarkar, “Spatiotemporally Constrained Action Space Attacks on Deep Reinforcement Learning Agents”, AAAI, vol. 34, no. 04, pp. 4577-4584, Apr. 2020.