Mao, Xiaofeng, et al. “Composite Adversarial Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 10, May 2021, pp. 8884-92, doi:10.1609/aaai.v35i10.17075.