“Non-Lipschitz Attack: A More Sparse Adversarial Attack via Non-Lipschitz $ℓ_p$ Regularization” (2023) CSIAM Transactions on Applied Mathematics, 4(4), pp. 797–819. doi:10.4208/csiam-am.SO-2022-0005.