Query-Efficient Black-Box Attack by Active Learning | IEEE Conference Publication | IEEE Xplore