Li, Yingwei, et al. “Learning Transferable Adversarial Examples via Ghost Networks”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 34, no. 07, Apr. 2020, pp. 11458-65, doi:10.1609/aaai.v34i07.6810.