Fig. 12

Examples showing the semantic segmentation maps of efficientnet-b7_FPN when attacked with ‘robust’ patches trained using EoT. Top two rows- the original image and the original segmentation map, where the target and patch are marked in red and white accordingly. Right- the IPatch used in the attack, each one has been trained for a different class but the same remote target location