Z. Yin, “VQAttack: Transferable Adversarial Attacks on Visual Question Answering via Pre-trained Models”, AAAI, vol. 38, no. 7, pp. 6755-6763, Mar. 2024.