Chen, Yiding, and Xiaojin Zhu. “Optimal Attack Against Autoregressive Models by Manipulating the Environment”. Proceedings of the AAAI Conference on Artificial Intelligence 34, no. 04 (April 3, 2020): 3545-3552. Accessed August 14, 2022. https://ojs.aaai.org/index.php/AAAI/article/view/5760.