Z. Wei, J. Chen, M. Goldblum, Z. Wu, T. Goldstein, and Y.-G. Jiang, “Towards Transferable Adversarial Attacks on Vision Transformers”, AAAI, vol. 36, no. 3, pp. 2668-2676, Jun. 2022.