Attention-Guided Digital Adversarial Patches on Visual Detection

Figure 9

(a) Shows the convergence speed of different patch generation algorithms under the same iteration times. In terms of hiding effect, this method is more stable and can generate available patches faster. (b) The performance of the algorithm in terms of transferability. With the increase of the adversarial patch field, the effect increases.

(a)

(b)