Wang, Ruikui, et al. “AGS: Affordable and Generalizable Substitute Training for Transferable Adversarial Attack”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 38, no. 6, Mar. 2024, pp. 5553-62, doi:10.1609/aaai.v38i6.28365.