Fig. 2From: Ally patches for spoliation of adversarial patchesThe used adversarial patches for evaluation, as generated by [3]. Whereas the patches are imperceptible by humans, they are perceptible and salient to the CNN modelsBack to article page