Two Improved Methods of Generating Adversarial Examples against Faster R-CNNs for Tram Environment Perception Systems

Figure 3

The shared procedure of the improved PGD method and the improved C&W method. The only difference between the two methods is the gradient calculation formula.