Li, M., Y. Yang, K. Wei, X. Yang, and H. Huang. “Learning Universal Adversarial Perturbation by Adversarial Example”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 36, no. 2, June 2022, pp. 1350-8, doi:10.1609/aaai.v36i2.20023.