Two Improved Methods of Generating Adversarial Examples against Faster R-CNNs for Tram Environment Perception Systems

Figure 1

An adversarial image generated by FGSM [21]. Left: a clean image of a panda. Middle: perturbation. Right: one sample adversarial image, classified as a gibbon.