Adv-Plate Attack: Adversarially Perturbed Plate for License Plate Recognition System

Algorithm 1

Adv-plate attack.

Input: original sample x, epsilon ∈, alpha α, iteration r

First type for adversarial example generation:

   // license place area

  return

Second type for adversarial example generation:

  for to do

       // license place area

  end for

  return