Zheng, T., C. Chen, and K. Ren. “Distributionally Adversarial Attack”. Proceedings of the AAAI Conference on Artificial Intelligence, vol. 33, no. 01, July 2019, pp. 2253-60, doi:10.1609/aaai.v33i01.33012253.