Mao X, Chen Y, Wang S, Su H, He Y, Xue H. Composite Adversarial Attacks. AAAI [Internet]. 2021May18 [cited 2024Apr.18];35(10):8884-92. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/17075