Fig. 3From: DTA: distribution transform-based attack for query-limited scenarioHistogram of the query number that is required to perform a successful attack on CIFAR-10 and SVHN. The median and mean lines denote the median query count and the average query count of the corresponding method (indicated by color), respectivelyBack to article page