L. Meihong, J. Shuang, and D. Yu, “Adversarial sample attack method based on loss smoothing”, SIDR, vol. 3, pp. 218–228, Oct. 2024.