Mao, Xiaofeng, Yuefeng Chen, Shuhui Wang, Hang Su, Yuan He, and Hui Xue. “Composite Adversarial Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence 35, no. 10 (May 18, 2021): 8884–8892. Accessed May 29, 2026. https://ojs.aaai.org/index.php/AAAI/article/view/17075.