Two Improved Methods of Generating Adversarial Examples against Faster R-CNNs for Tram Environment Perception Systems

Figure 9

Comparison of Euclidean distances between the clean images and the adversarial examples generated by the improved PGD algorithm and those generated by the improved C&W method.