Fig. 16From: IPatch: a remote adversarial patchThe average confidence of different encoders and architectures when under attackBack to article page