Fig. 4From: Ally patches for spoliation of adversarial patchesThe success rates before and after using the proposed ally patches with three different pre-trained CNN models: a ResNet50 [10], b VGG16 [22], and c VGG19 [22]Back to article page