Fig. 7From: IPatch: a remote adversarial patchThe attack performance with locked parameters. Top- The average attack performance per class. Bottom- the aggregated confidence of the model on each image, where the max confidence per class is oneBack to article page