Robustness and Explainability of Image Classification Based on QCNN

Figure 9

Different kinds of adversarial attacked image and their associated perturbation.