Tengjiao Li, Maosen Li, Yanhua Yang, Cheng Deng: Frequency domain regularization for iterative adversarial attacks. Pattern Recognit. 134: 109075 (2023)