Adv-Plate Attack: Adversarially Perturbed Plate for License Plate Recognition System

Figure 3

The procedure for the original sample (left) and proposed adversarial example (right) in the LPR system and the classification score of the first word for the original sample and the proposed adversarial example by CNN.