On six printed photos, STE-augmented PGD forces 0/6 correct classifications at a 4/255 bound; in CARLA, an 8/255 patch lowers object-detection AP50 to 4.22%.
Synthesizing robust adversarial examples
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Imperceptible Adversarial Examples in the Physical World
On six printed photos, STE-augmented PGD forces 0/6 correct classifications at a 4/255 bound; in CARLA, an 8/255 patch lowers object-detection AP50 to 4.22%.