AdvU-Net: Generating Adversarial Example Based on Medical Image and Targeting U-Net Model

Figure 2

Pixel error between the original label and the output result for the adversarial example according to epsilon value.