Qin, Yunxiao, et al. “Training Meta-Surrogate Model for Transferable Adversarial Attack”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, no. 8, June 2023, pp. 9516-24, doi:10.1609/aaai.v37i8.26139.