Fig. 10From: IPatch: a remote adversarial patchThe average attack performance on the same 20x20 region, but with different target sizesBack to article page