Content-based Unrestricted Adversarial Attack - Chen, Zhaoyu; Li, Bo; Wu, Shuang; Jiang, Kaixun; Ding, Shouhong; Zhang, Wenqiang (Advances in Neural Information Processing Systems, 2023)