C. Zhang, P. Benz, T. Imtiaz, and I.-S. Kweon, “CD-UAP: Class Discriminative Universal Adversarial Perturbation”, AAAI, vol. 34, no. 04, pp. 6754-6761, Apr. 2020.