Fig. 13From: IPatch: a remote adversarial patchThe performance of a robust patch when trained on different set sizesBack to article page