Mao, X., Y. Chen, S. Wang, H. Su, Y. He, and H. Xue. “Composite Adversarial Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 10, May 2021, pp. 8884-92, doi:10.1609/aaai.v35i10.17075.