Adv-Plate Attack: Adversarially Perturbed Plate for License Plate Recognition System

Figure 6

The accuracy of the adversarial examples generated by the first type of the proposed method according to epsilon.