Fig. 8From: IPatch: a remote adversarial patchThe average attack performance with different patch sizesBack to article page