@article{bommasani2021opportunities,
  title={On the opportunities and risks of foundation models},
  author={Bommasani, Rishi and Hudson, Drew A and Adeli, Ehsan and Altman, Russ and Arora, Simran and von Arx, Sydney and Bernstein, Michael S and Bohg, Jeannette and Bosselut, Antoine and Brunskill, Emma and others},
  journal={arXiv preprint arXiv:2108.07258},
  year={2021}
}
@article{wu2020visual,
  title={Visual transformers: Token-based image representation and processing for computer vision},
  author={Wu, Bichen and Xu, Chenfeng and Dai, Xiaoliang and Wan, Alvin and Zhang, Peizhao and Yan, Zhicheng and Tomizuka, Masayoshi and Gonzalez, Joseph and Keutzer, Kurt and Vajda, Peter},
  journal={arXiv preprint arXiv:2006.03677},
  year={2020}
}
@article{han2022survey,
  title={A survey on vision transformer},
  author={Han, Kai and Wang, Yunhe and Chen, Hanting and Chen, Xinghao and Guo, Jianyuan and Liu, Zhenhua and Tang, Yehui and Xiao, An and Xu, Chunjing and Xu, Yixing and others},
  journal={IEEE Transactions on Pattern Analysis and Machine Intelligence},
  volume={45},
  number={1},
  pages={87--110},
  year={2022},
  publisher={IEEE}
}
@inproceedings{choi2017attentional,
  title={Attentional correlation filter network for adaptive visual tracking},
  author={Choi, Jongwon and Jin Chang, Hyung and Yun, Sangdoo and Fischer, Tobias and Demiris, Yiannis and Young Choi, Jin},
  booktitle={Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition},
  pages={4807--4816},
  year={2017}
}
@inproceedings{choi2019deep,
  title={Deep meta learning for real-time target-aware visual tracking},
  author={Choi, Janghoon and Kwon, Junseok and Lee, Kyoung Mu},
  booktitle={Proceedings of the IEEE/CVF International Conference on Computer Vision},
  pages={911--920},
  year={2019}
}
@inproceedings{yu2020deformable,
  title={Deformable siamese attention networks for visual object tracking},
  author={Yu, Yuechen and Xiong, Yilei and Huang, Weilin and Scott, Matthew R},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={6728--6737},
  year={2020}
}
@inproceedings{du2020correlation,
  title={Correlation-guided attention for corner detection based visual tracking},
  author={Du, Fei and Liu, Peng and Zhao, Wei and Tang, Xianglong},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={6836--6845},
  year={2020}
}
@article{vaswani2017attention,
  title={Attention is all you need},
  author={Vaswani, Ashish and Shazeer, Noam and Parmar, Niki and Uszkoreit, Jakob and Jones, Llion and Gomez, Aidan N and Kaiser, {\L}ukasz and Polosukhin, Illia},
  journal={Advances in Neural Information Processing Systems},
  volume={30},
  year={2017}
}
@article{devlin2018bert,
  title={Bert: Pre-training of deep bidirectional transformers for language understanding},
  author={Devlin, Jacob and Chang, Ming-Wei and Lee, Kenton and Toutanova, Kristina},
  journal={arXiv preprint arXiv:1810.04805},
  year={2018}
}
@inproceedings{karita2019comparative,
  title={A comparative study on transformer vs rnn in speech applications},
  author={Karita, Shigeki and Chen, Nanxin and Hayashi, Tomoki and Hori, Takaaki and Inaguma, Hirofumi and Jiang, Ziyan and Someki, Masao and Soplin, Nelson Enrique Yalta and Yamamoto, Ryuichi and Wang, Xiaofei and others},
  booktitle={2019 IEEE Automatic Speech Recognition and Understanding Workshop (ASRU)},
  pages={449--456},
  year={2019},
  organization={IEEE}
}
@article{goodfellow2014explaining,
  title={Explaining and harnessing adversarial examples},
  author={Goodfellow, Ian J and Shlens, Jonathon and Szegedy, Christian},
  journal={arXiv preprint arXiv:1412.6572},
  year={2014}
}
@inproceedings{moosavi2017universal,
  title={Universal adversarial perturbations},
  author={Moosavi-Dezfooli, Seyed-Mohsen and Fawzi, Alhussein and Fawzi, Omar and Frossard, Pascal},
  booktitle={Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition},
  pages={1765--1773},
  year={2017}
}
@article{wei2018transferable,
  title={Transferable adversarial attacks for image and video object detection},
  author={Wei, Xingxing and Liang, Siyuan and Chen, Ning and Cao, Xiaochun},
  journal={arXiv preprint arXiv:1811.12641},
  year={2018}
}
@article{fischer2017adversarial,
  title={Adversarial examples for semantic image segmentation},
  author={Fischer, Volker and Kumar, Mummadi Chaithanya and Metzen, Jan Hendrik and Brox, Thomas},
  journal={arXiv preprint arXiv:1703.01101},
  year={2017}
}
@article{zhang2020interpreting,
  title={Interpreting and improving adversarial robustness of deep neural networks with neuron sensitivity},
  author={Zhang, Chongzhi and Liu, Aishan and Liu, Xianglong and Xu, Yitao and Yu, Hang and Ma, Yuqing and Li, Tianlin},
  journal={IEEE Transactions on Image Processing},
  volume={30},
  pages={1291--1304},
  year={2020},
  publisher={IEEE}
}
@article{marvasti2021deep,
  title={Deep learning for visual tracking: A comprehensive survey},
  author={Marvasti-Zadeh, Seyed Mojtaba and Cheng, Li and Ghanei-Yakhdan, Hossein and Kasaei, Shohreh},
  journal={IEEE Transactions on Intelligent Transportation Systems},
  year={2021},
  publisher={IEEE}
}
@inproceedings{li2018high,
  title={High performance visual tracking with siamese region proposal network},
  author={Li, Bo and Yan, Junjie and Wu, Wei and Zhu, Zheng and Hu, Xiaolin},
  booktitle={Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition},
  pages={8971--8980},
  year={2018}
}
@article{javed2022visual,
  title={Visual object tracking with discriminative filters and siamese networks: a survey and outlook},
  author={Javed, Sajid and Danelljan, Martin and Khan, Fahad Shahbaz and Khan, Muhammad Haris and Felsberg, Michael and Matas, Jiri},
  journal={IEEE Transactions on Pattern Analysis and Machine Intelligence},
  year={2022},
  publisher={IEEE}
}
@inproceedings{li2019siamrpn++,
  title={Siamrpn++: Evolution of siamese visual tracking with very deep networks},
  author={Li, Bo and Wu, Wei and Wang, Qiang and Zhang, Fangyi and Xing, Junliang and Yan, Junjie},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={4282--4291},
  year={2019}
}
@article{szegedy2013intriguing,
  title={Intriguing properties of neural networks},
  author={Szegedy, Christian and Zaremba, Wojciech and Sutskever, Ilya and Bruna, Joan and Erhan, Dumitru and Goodfellow, Ian and Fergus, Rob},
  journal={arXiv preprint arXiv:1312.6199},
  year={2013}
}
@article{yu2019interpreting,
  title={Interpreting and evaluating neural network robustness},
  author={Yu, Fuxun and Qin, Zhuwei and Liu, Chenchen and Zhao, Liang and Wang, Yanzhi and Chen, Xiang},
  journal={arXiv preprint arXiv:1905.04270},
  year={2019}
}
@inproceedings{moosavi2016deepfool,
  title={Deepfool: a simple and accurate method to fool deep neural networks},
  author={Moosavi-Dezfooli, Seyed-Mohsen and Fawzi, Alhussein and Frossard, Pascal},
  booktitle={Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition},
  pages={2574--2582},
  year={2016}
}
@inproceedings{xie2017adversarial,
  title={Adversarial examples for semantic segmentation and object detection},
  author={Xie, Cihang and Wang, Jianyu and Zhang, Zhishuai and Zhou, Yuyin and Xie, Lingxi and Yuille, Alan},
  booktitle={Proceedings of the IEEE International Conference on Computer Vision},
  pages={1369--1378},
  year={2017}
}
@article{xiao2018generating,
  title={Generating adversarial examples with adversarial networks},
  author={Xiao, Chaowei and Li, Bo and Zhu, Jun-Yan and He, Warren and Liu, Mingyan and Song, Dawn},
  journal={arXiv preprint arXiv:1801.02610},
  year={2018}
}
@article{sharif2017adversarial,
  title={Adversarial generative nets: Neural network attacks on state-of-the-art face recognition},
  author={Sharif, Mahmood and Bhagavatula, Sruti and Bauer, Lujo and Reiter, Michael K},
  journal={arXiv preprint arXiv:1801.00349},
  volume={2},
  number={3},
  year={2017}
}
@inproceedings{wiyatno2019physical,
  title={Physical adversarial textures that fool visual object tracking},
  author={Wiyatno, Rey Reza and Xu, Anqi},
  booktitle={Proceedings of the IEEE/CVF International Conference on Computer Vision},
  pages={4822--4831},
  year={2019}
}
@inproceedings{athalye2018synthesizing,
  title={Synthesizing robust adversarial examples},
  author={Athalye, Anish and Engstrom, Logan and Ilyas, Andrew and Kwok, Kevin},
  booktitle={International Conference on Machine Learning},
  pages={284--293},
  year={2018},
  organization={PMLR}
}
@inproceedings{zhu2018distractor,
  title={Distractor-aware siamese networks for visual object tracking},
  author={Zhu, Zheng and Wang, Qiang and Li, Bo and Wu, Wei and Yan, Junjie and Hu, Weiming},
  booktitle={Proceedings of the European Conference on Computer Vision (ECCV)},
  pages={101--117},
  year={2018}
}
@article{ren2015faster,
  title={Faster r-cnn: Towards real-time object detection with region proposal networks},
  author={Ren, Shaoqing and He, Kaiming and Girshick, Ross and Sun, Jian},
  journal={Advances in Neural Information Processing Systems},
  volume={28},
  year={2015}
}
@inproceedings{liang2020efficient,
  title={Efficient adversarial attacks for visual object tracking},
  author={Liang, Siyuan and Wei, Xingxing and Yao, Siyuan and Cao, Xiaochun},
  booktitle={European Conference on Computer Vision},
  pages={34--50},
  year={2020},
  organization={Springer}
}
@inproceedings{yan2020cooling,
  title={Cooling-shrinking attack: Blinding the tracker with imperceptible noises},
  author={Yan, Bin and Wang, Dong and Lu, Huchuan and Yang, Xiaoyun},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={990--999},
  year={2020}
}
@inproceedings{jia2021iou,
  title={Iou attack: Towards temporally coherent black-box adversarial attack for visual object tracking},
  author={Jia, Shuai and Song, Yibing and Ma, Chao and Yang, Xiaokang},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={6709--6718},
  year={2021}
}
@inproceedings{jia2020robust,
  title={Robust tracking against adversarial attacks},
  author={Jia, Shuai and Ma, Chao and Song, Yibing and Yang, Xiaokang},
  booktitle={European Conference on Computer Vision},
  pages={69--84},
  year={2020},
  organization={Springer}
}
@inproceedings{chen2021transformer,
  title={Transformer tracking},
  author={Chen, Xin and Yan, Bin and Zhu, Jiawen and Wang, Dong and Yang, Xiaoyun and Lu, Huchuan},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={8126--8135},
  year={2021}
}
@inproceedings{cui2022mixformer,
  title={Mixformer: End-to-end tracking with iterative mixed attention},
  author={Cui, Yutao and Jiang, Cheng and Wang, Limin and Wu, Gangshan},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={13608--13618},
  year={2022}
}
@inproceedings{wang2021transformer,
  title={Transformer meets tracker: Exploiting temporal context for robust visual tracking},
  author={Wang, Ning and Zhou, Wengang and Wang, Jie and Li, Houqiang},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={1571--1580},
  year={2021}
}
@article{zhao2021trtr,
  title={Trtr: Visual tracking with transformer},
  author={Zhao, Moju and Okada, Kei and Inaba, Masayuki},
  journal={arXiv preprint arXiv:2105.03817},
  year={2021}
}
@article{sun2020transtrack,
  title={Transtrack: Multiple object tracking with transformer},
  author={Sun, Peize and Cao, Jinkun and Jiang, Yi and Zhang, Rufeng and Xie, Enze and Yuan, Zehuan and Wang, Changhu and Luo, Ping},
  journal={arXiv preprint arXiv:2012.15460},
  year={2020}
}
@inproceedings{bhojanapalli2021understanding,
  title={Understanding robustness of transformers for image classification},
  author={Bhojanapalli, Srinadh and Chakrabarti, Ayan and Glasner, Daniel and Li, Daliang and Unterthiner, Thomas and Veit, Andreas},
  booktitle={Proceedings of the IEEE/CVF International Conference on Computer Vision},
  pages={10231--10241},
  year={2021}
}
@article{benz2021adversarial,
  title={Adversarial robustness comparison of vision transformer and mlp-mixer to cnns},
  author={Benz, Philipp and Ham, Soomin and Zhang, Chaoning and Karjauv, Adil and Kweon, In So},
  journal={arXiv preprint arXiv:2110.02797},
  year={2021}
}
@inproceedings{gu2022vision,
  title={Are vision transformers robust to patch perturbations?},
  author={Gu, Jindong and Tresp, Volker and Qin, Yao},
  booktitle={Computer Vision--ECCV 2022: 17th European Conference, Tel Aviv, Israel, October 23--27, 2022, Proceedings, Part XII},
  pages={404--421},
  year={2022},
  organization={Springer}
}
@article{bai2021transformers,
  title={Are transformers more robust than cnns?},
  author={Bai, Yutong and Mei, Jieru and Yuille, Alan L and Xie, Cihang},
  journal={Advances in Neural Information Processing Systems},
  volume={34},
  pages={26831--26843},
  year={2021}
}
@article{fu2022patch,
  title={Patch-fool: Are vision transformers always robust against adversarial perturbations?},
  author={Fu, Yonggan and Zhang, Shunyao and Wu, Shang and Wan, Cheng and Lin, Yingyan},
  journal={arXiv preprint arXiv:2203.08392},
  year={2022}
}
@article{tang2021robustart,
  title={Robustart: Benchmarking robustness on architecture design and training techniques},
  author={Tang, Shiyu and Gong, Ruihao and Wang, Yan and Liu, Aishan and Wang, Jiakai and Chen, Xinyun and Yu, Fengwei and Liu, Xianglong and Song, Dawn and Yuille, Alan and others},
  journal={arXiv preprint arXiv:2109.05211},
  year={2021}
}
@inproceedings{bai2022improving,
  title={Improving vision transformers by revisiting high-frequency components},
  author={Bai, Jiawang and Yuan, Li and Xia, Shu-Tao and Yan, Shuicheng and Li, Zhifeng and Liu, Wei},
  booktitle={Computer Vision--ECCV 2022: 17th European Conference, Tel Aviv, Israel, October 23--27, 2022, Proceedings, Part XXIV},
  pages={1--18},
  year={2022},
  organization={Springer}
}
@inproceedings{wu2022towards,
  title={Towards efficient adversarial training on vision transformers},
  author={Wu, Boxi and Gu, Jindong and Li, Zhifeng and Cai, Deng and He, Xiaofei and Liu, Wei},
  booktitle={Computer Vision--ECCV 2022: 17th European Conference, Tel Aviv, Israel, October 23--27, 2022, Proceedings, Part XIII},
  pages={307--325},
  year={2022},
  organization={Springer}
}
@article{naseer2021intriguing,
  title={Intriguing properties of vision transformers},
  author={Naseer, Muhammad Muzammal and Ranasinghe, Kanchana and Khan, Salman H and Hayat, Munawar and Shahbaz Khan, Fahad and Yang, Ming-Hsuan},
  journal={Advances in Neural Information Processing Systems},
  volume={34},
  pages={23296--23308},
  year={2021}
}
@inproceedings{paul2022vision,
  title={Vision transformers are robust learners},
  author={Paul, Sayak and Chen, Pin-Yu},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={36},
  number={2},
  pages={2071--2081},
  year={2022}
}
@article{shao2021adversarial,
  title={On the Adversarial Robustness of Vision Transformers},
  author={Shao, Rulin and Shi, Zhouxing and Yi, Jinfeng and Chen, Pin-Yu and Hsieh, Cho-Jui},
  journal={arXiv preprint arXiv:2103.15670},
  year={2021}
}
@article{shi2022decision,
  title={Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal},
  author={Shi, Yucheng and Han, Yahong and Tan, Yu-an and Kuang, Xiaohui},
  journal={Advances in Neural Information Processing Systems},
  volume={35},
  pages={12921--12933},
  year={2022}
}
@inproceedings{bhat2019learning,
  title={Learning Discriminative Model Prediction for Tracking},
  author={Bhat, Goutam and Danelljan, Martin and Gool, Luc Van and Timofte, Radu},
  booktitle={Proceedings of the IEEE/CVF International Conference on Computer Vision},
  pages={6182--6191},
  year={2019}
}
@inproceedings{yan2021learning,
  title={Learning spatio-temporal transformer for visual tracking},
  author={Yan, Bin and Peng, Houwen and Fu, Jianlong and Wang, Dong and Lu, Huchuan},
  booktitle={Proceedings of the IEEE/CVF international conference on computer vision},
  pages={10448--10457},
  year={2021}
}
@inproceedings{gao2022aiatrack,
  title={Aiatrack: Attention in attention for transformer visual tracking},
  author={Gao, Shenyuan and Zhou, Chunluan and Ma, Chao and Wang, Xinggang and Yuan, Junsong},
  booktitle={European Conference on Computer Vision},
  pages={146--164},
  year={2022},
  organization={Springer}
}
@inproceedings{ye2022joint,
  title={Joint feature learning and relation modeling for tracking: A one-stream framework},
  author={Ye, Botao and Chang, Hong and Ma, Bingpeng and Shan, Shiguang and Chen, Xilin},
  booktitle={European Conference on Computer Vision},
  pages={341--357},
  year={2022},
  organization={Springer}
}
@article{lin2022swintrack,
  title={Swintrack: A simple and strong baseline for transformer tracking},
  author={Lin, Liting and Fan, Heng and Zhang, Zhipeng and Xu, Yong and Ling, Haibin},
  journal={Advances in Neural Information Processing Systems},
  volume={35},
  pages={16743--16754},
  year={2022}
}
@inproceedings{kristan2018sixth,
  title={The sixth visual object tracking vot2018 challenge results},
  author={Kristan, Matej and Leonardis, Ales and Matas, Jiri and Felsberg, Michael and Pflugfelder, Roman and ˇCehovin Zajc, Luka and Vojir, Tomas and Bhat, Goutam and Lukezic, Alan and Eldesokey, Abdelrahman and others},
  booktitle={Proceedings of the European conference on computer vision (ECCV) workshops},
  pages={0--0},
  year={2018}
}
@article{huang2019got,
  title={Got-10k: A large high-diversity benchmark for generic object tracking in the wild},
  author={Huang, Lianghua and Zhao, Xin and Huang, Kaiqi},
  journal={IEEE transactions on pattern analysis and machine intelligence},
  volume={43},
  number={5},
  pages={1562--1577},
  year={2019},
  publisher={IEEE}
}
@inproceedings{wu2013online,
  title={Online object tracking: A benchmark},
  author={Wu, Yi and Lim, Jongwoo and Yang, Ming-Hsuan},
  booktitle={Proceedings of the IEEE conference on computer vision and pattern recognition},
  pages={2411--2418},
  year={2013}
}
@article{hu2024tfitrack,
  title={TFITrack: Transformer Feature Integration Network for Object Tracking},
  author={Hu, Xiuhua and Liu, Huan and Li, Shuang and Zhao, Jing and Hui, Yan},
  journal={International Journal of Computational Intelligence Systems},
  volume={17},
  number={1},
  pages={107},
  year={2024},
  publisher={Springer}
}
@inproceedings{chen2020one,
  title={One-shot adversarial attacks on visual tracking with dual attention},
  author={Chen, Xuesong and Yan, Xiyu and Zheng, Feng and Jiang, Yong and Xia, Shu-Tao and Zhao, Yong and Ji, Rongrong},
  booktitle={Proceedings of the IEEE/CVF conference on computer vision and pattern recognition},
  pages={10176--10185},
  year={2020}
}
@inproceedings{guo2020spark,
  title={Spark: Spatial-aware online incremental attack against visual tracking},
  author={Guo, Qing and Xie, Xiaofei and Juefei-Xu, Felix and Ma, Lei and Li, Zhongguo and Xue, Wanli and Feng, Wei and Liu, Yang},
  booktitle={European conference on computer vision},
  pages={202--219},
  year={2020},
  organization={Springer}
}
@article{yin2022dimba,
  title={Dimba: discretely masked black-box attack in single object tracking},
  author={Yin, Xiangyu and Ruan, Wenjie and Fieldsend, Jonathan},
  journal={Machine Learning},
  pages={1--19},
  year={2022},
  publisher={Springer}
}
@article{nakka2020temporally,
  title={Temporally-transferable perturbations: Efficient, one-shot adversarial attacks for online visual object trackers},
  author={Nakka, Krishna Kanth and Salzmann, Mathieu},
  journal={arXiv preprint arXiv:2012.15183},
  year={2020}
}
@article{zhou2023only,
  title={Only Once Attack: Fooling the Tracker with Adversarial Template},
  author={Zhou, Ze and Sun, Yinghui and Sun, Quansen and Li, Chaobo and Ren, Zhenwen},
  journal={IEEE Transactions on Circuits and Systems for Video Technology},
  year={2023},
  publisher={IEEE}
}
