Fig. 12From: Adversarial attack and defense in reinforcement learning-from AI security viewFour categories of VIN adversarial maps. The first line denotes the original maps, the second line represents the adversarial eaxmples generated, and the third line is the extracted path image. a The UrP. b The FP. c The DP. d The UcPBack to article page