nn_adversarial.png This image displays a table titled Table 1: Sample of physical adversarial examples against LISA-CNN and GTSRB-CNN. The table is organized into six columns and seven rows, including the header row and a footer row with statistics. The first column lists the Distance/Angle for each set of images. The labels are: - 5' 0° - 5' 15° - 10' 0° - 10' 30° - 40' 0° The subsequent five columns show photographs of modified traffic signs corresponding to different attack methods. Column 2 is labeled Subtle Poster. It shows a standard red octagonal STOP sign with white lettering. In the top rows (5 feet away), the sign is large and clear, set against an outdoor background with glass windows. As the distance increases down the column, the sign appears smaller and further away in the environment. Column 3 is labeled Subtle Poster Right Turn. It shows a yellow diamond-shaped traffic sign with a black arrow curving to the right. The top images show it indoors or near a building entrance. As the rows progress downward, the sign appears further down a hallway or corridor. Column 4 is labeled Camouflage Graffiti. These images show red octagonal STOP signs that have been altered with white text. Above the word STOP, the letters LIE are written in white. Below the word STOP, the letters HATE are written in white. The background changes from an outdoor setting to a brick wall as the distance increases. Column 5 is labeled Camouflage Art (LISA-CNN). These images show red octagonal STOP signs with black rectangular shapes adhered to or painted on the lower half of the sign. These black markings obscure parts of the white letters, specifically affecting the bottom portion of the word STOP. The background varies from outdoor settings to indoor hallways. Column 6 is labeled Camouflage Art (GTSRB-CNN). These images show red octagonal STOP signs with white rectangular shapes adhered to or painted on the right side of the sign. These white markings disrupt the visual pattern of the letters. The backgrounds vary, including indoor stairwells and hallways. The bottom row is labeled Targeted-Attack Success. It lists percentages for each column: - Under Subtle Poster: 100% - Under Subtle Poster Right Turn: 73.33% - Under Camouflage Graffiti: 66.67% - Under Camouflage Art (LISA-CNN): 100% - Under Camouflage Art (GTSRB-CNN): 80% At the very bottom of the image, there is a source link: Source: https://arxiv.org/pdf/1707.08945 This description was generated automatically. Please feel free to ask questions if you have further questions about the nature of the image or its meaning within the presentation.