Evasion Attacks on Deep Learning-Based Helicopter Recognition Systems

Figure 3

An example of adversarial examples according to epsilon : (a) original, (b) 0.1, (c) 0.2, (d) 0.3, (e) 0.4, (f) 0.5, (g) 0.6, (h) 0.7, (i) 0.8, and (j) 0.9.

(a)

(b)

(c)

(d)

(e)

(f)

(g)

(h)

(i)

(j)