Question: What are the benchmark attacking methods?
Answer: FGM, FGVM, DeepFool BIBREF5, HotFlip BIBREF3) and TYC BIBREF4
Alternative answer: FGM, FGVM, DeepFool, HotFlip, TYC