1. Do adversarially ro-bust imagenet models transfer better?;salman;arXiv preprint arXiv 2007 09948,2020
2. ImageNet Large Scale Visual Recognition Challenge
3. On improving adversarial transferability of vision transformers;naseer,2021
4. Intriguing properties of vision transformers;naseer,2021
5. Cross-domain transferability of adversarial perturbations;naseer;Advances in neural information processing systems,2019