Research Article

Detection Mechanisms of One-Pixel Attack

Figure 3

L1 norm of an infected image to label airplane.