Zheng, Tianhang, Changyou Chen, and Kui Ren. “Distributionally Adversarial Attack”. Proceedings of the AAAI Conference on Artificial Intelligence 33, no. 01 (July 17, 2019): 2253–2260. Accessed May 23, 2026. https://ojs.aaai.org/index.php/AAAI/article/view/4061.