ALA: Adversarial Lightness Attack via Naturalness-aware Regularizations