Fig. 17From: IPatch: a remote adversarial patchThe average attack success rate on each model when attacked with a patch trained on efficientnet-b7_FPNBack to article page