Qin Y, Xiong Y, Yi J, Hsieh C-J. Training Meta-Surrogate Model for Transferable Adversarial Attack. AAAI [Internet]. 2023 Jun. 26 [cited 2026 May 26];37(8):9516-24. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/26139