Chen Y, Zhu X. Optimal Attack against Autoregressive Models by Manipulating the Environment. AAAI [Internet]. 2020Apr.3 [cited 2024Jul.11];34(04):3545-52. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/5760