Yang, Zhuo, et al. “Characterizing the Evasion Attackability of Multi-Label Classifiers”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 12, May 2021, pp. 10647-55, doi:10.1609/aaai.v35i12.17273.