Adv-Plate Attack: Adversarially Perturbed Plate for License Plate Recognition System

Figure 4

An example of adversarial examples generated using the first proposed method according to epsilon.

(a) Original sample

(b) Original license

(c) = 0.05

(d) = 0.1

(e) = 0.15

(f) = 0.2

(g) = 0.25

(h) = 0.3

(i) = 0.35

(j) = 0.4

(k) = 0.45

(l) Proposde image ( = 0.45)