@inproceedings{ijcai2021p430,
  title     = {Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity},
  author    = {Wang, Yajie and Wu, Shangbo and Jiang, Wenyi and Hao, Shengang and Tan, Yu-an and Zhang, Quanxin},
  booktitle = {Proceedings of the Thirtieth International Joint Conference on
               Artificial Intelligence, {IJCAI-21}},
  publisher = {International Joint Conferences on Artificial Intelligence Organization},
  editor    = {Zhi-Hua Zhou},
  pages     = {3125--3133},
  year      = {2021},
  month     = {8},
  note      = {Main Track},
  doi       = {10.24963/ijcai.2021/430},
  url       = {https://doi.org/10.24963/ijcai.2021/430},
}