K. D. Doan, Y. Lao, P. Yang, and P. Li, “Defending Backdoor Attacks on Vision Transformer via Patch Processing”, AAAI, vol. 37, no. 1, pp. 506-515, Jun. 2023.