Xu, Q., G. Tao, S. Cheng, and X. Zhang. “Towards Feature Space Adversarial Attack by Style Perturbation”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 35, no. 12, May 2021, pp. 10523-31, doi:10.1609/aaai.v35i12.17259.