Patch Shuffling Trick Makes Adversarial Attacks on Vision Transformers Far More Transferable
Researchers have shown that randomly shuffling embedded patch tokens inside vision transformer surrogate models during adversarial example generation substantially improves ...










