Research Article
Evasion Attacks on Deep Learning-Based Helicopter Recognition Systems
Figure 3
An example of adversarial examples according to epsilon : (a) original, (b) 0.1, (c) 0.2, (d) 0.3, (e) 0.4, (f) 0.5, (g) 0.6, (h) 0.7, (i) 0.8, and (j) 0.9.
(a) |
(b) |
(c) |
(d) |
(e) |
(f) |
(g) |
(h) |
(i) |
(j) |