Xu, Q., G. Tao, S. Cheng, and X. Zhang. “Towards Feature Space Adversarial Attack by Style Perturbation”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 12, May 2021, pp. 10523-31, https://ojs.aaai.org/index.php/AAAI/article/view/17259.