@article{WangSZZSW21, title={Invisible Adversarial Attack against Deep Neural Networks: An Adaptive Penalization Approach}, author={Zhibo Wang and Mengkai Song and Siyan Zheng and Zhifei Zhang and Yang Song and Qian Wang}, journal={{IEEE} Transactions on Dependable and Secure Computing}, volume={18}, number={3}, pages ={1474--1488}, year={2021} }