Xu Q, Tao G, Cheng S, Zhang X. Towards Feature Space Adversarial Attack by Style Perturbation. AAAI [Internet]. 2021May18 [cited 2024Jul.16];35(12):10523-31. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/17259