PlAA: Pixel-level Adversarial Attack on Attention for Deep Neural Network. - Huailin Liu; Jing Liu (ICANN (1), 2022)

DIPA: Adversarial Attack on DNNs by Dropping Information and Pixel-Level Attack on Attention. - Jing Liu 003; Huailin Liu; Pengju Wang; Yang Wu; Keqin Li 001 (Inf., 2024)