Fig. 11From: IPatch: a remote adversarial patchThe remote attack performance on ten images. A region in the heat map indicates the performance of the attack when targeting that locationBack to article page