C. Gao, “Attacking Transformers with Feature Diversity Adversarial Perturbation”, AAAI, vol. 38, no. 3, pp. 1788–1796, Mar. 2024.