@inproceedings {tao2023hard,
    author = {Guanhong Tao and Shengwei An and Siyuan Cheng and Guangyu Shen and Xiangyu Zhang},
    title = {Hard-label Black-box Universal Adversarial Patch Attack},
    booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
    year = {2023},
    isbn = {978-1-939133-37-3},
    pages = {697--714},
    publisher = {USENIX Association},
}