Liang, Zihan. “Adversarial Robustness of Vision Transformers Under Black-Box Query-Limited Attacks: A Comparative Study With Proposed Defense—PRISM: Patch Randomization With Inference-Time Smoothing and Query Monitoring”. CPS Digital Library - Series of Conferences 4, no. 2 (October 1, 2025): 23–28. Accessed September 1, 2026. https://seriesofconference.com/index.php/SCJ/article/view/181.