Yang Z, Han Y, Zhang X. Characterizing the Evasion Attackability of Multi-label Classifiers. AAAI [Internet]. 2021 May 18 [cited 2026 May 13];35(12):10647-55. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/17273