Liang, Zihan. “Adversarial Robustness of Vision Transformers Under Black-Box Query-Limited Attacks: A Comparative Study With Proposed Defense—PRISM: Patch Randomization With Inference-Time Smoothing and Query Monitoring”. CPS Digital Library - Series of Conferences, vol. 4, no. 2, Oct. 2025, pp. 23-28, https://seriesofconference.com/index.php/SCJ/article/view/181.