A. Hamdi, M. Mueller, and B. Ghanem, “SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications”, AAAI, vol. 34, no. 07, pp. 10901-10908, Apr. 2020.