Qin, Y., Y. Xiong, J. Yi, and C.-J. Hsieh. “Training Meta-Surrogate Model for Transferable Adversarial Attack”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, no. 8, June 2023, pp. 9516-24, doi:10.1609/aaai.v37i8.26139.