Cascade & allocate: A cross-structure adversarial attack against models fusing vision and language

Boyuan Zhang, Yucheng Shi, Yahong Han, Qinghua Hu, Weiping Ding