Algorithm 2
From: Hard label adversarial attack with high query efficiency against NLP models

RISSR(x, f), Random Initialization and Search Space Reduction.
From: Hard label adversarial attack with high query efficiency against NLP models

RISSR(x, f), Random Initialization and Search Space Reduction.