A

Adversarial Edit Attacks

Adversarial attacks on tree-structured data based on the tree edit distance.