Black-box attack against handwritten signature verification with region-restricted adversarial perturbations. - Haoyang Li; Heng Li 008; Hansong Zhang 002; Wei Yuan 001 (Pattern Recognit., 2021)