Gao, C.; Zhou, H.; Yu, J.; Ye, Y.; Cai, J.; Wang, J.; Yang, W. Attacking Transformers With Feature Diversity Adversarial Perturbation. AAAI 2024, 38, 1788-1796.