Non-Lipschitz Attack: A More Sparse Adversarial Attack via Non-Lipschitz $ℓ_p$ Regularization. (2023). CSIAM Transactions on Applied Mathematics, 4(4), 797-819. https://doi.org/10.4208/csiam-am.SO-2022-0005