% Key papers for Transfer attacks on vision transformers (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{aaai2022_towards_2865,
  title = {{Towards Transferable Adversarial Attacks on Vision Transformers}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2022},
  url = {https://aaai.org/papers/02668-towards-transferable-adversarial-attacks-on-vision-transformers/},
}

@inproceedings{cvpr2023_transferable_22411,
  title = {{Transferable Adversarial Attacks on Vision Transformers With Token Gradient Regularization}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21093},
}

@inproceedings{cvpr2025_chain_25688,
  title = {{Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/32399},
}

@inproceedings{iclr2022_on_31021,
  title = {{On Improving Adversarial Transferability of Vision Transformers}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2022},
  url = {https://iclr.cc/virtual/2022/poster/6341},
}

@inproceedings{cvpr2025_improving_26603,
  title = {{Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/32841},
}

@inproceedings{aaai2024_attacking_5216,
  title = {{Attacking Transformers with Feature Diversity Adversarial Perturbation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/27947},
}

@inproceedings{neurips2024_boosting_74149,
  title = {{Boosting the Transferability of Adversarial Attack on Vision Transformer with Adaptive Token Tuning}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93393},
}

@inproceedings{iclr2024_enhancing_33478,
  title = {{Enhancing Transferable Adversarial Attacks on Vision Transformers through Gradient Normalization Scaling and High-Frequency Adaptation}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19597},
}

@inproceedings{aaai2026_manipulating_105584,
  title = {{Manipulating the Mind’s Eye: A-SAGE, the Attention-Based Attack on ViT Explainability}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/38340},
}