Non-Lipschitz Attack: A More Sparse Adversarial Attack via Non-Lipschitz $ℓ_p$ Regularization. CSIAM-AM 2023, 4 (4), 797-819. https://doi.org/10.4208/csiam-am.SO-2022-0005.