Restricted-Area Adversarial Example Attack for Image Captioning Model

Table 4

Comparison of BLUE scores for an original sample, the baseline adversarial example, and the proposed adversarial example.

Description	Original sample	Baseline	Proposed
BLUE1	0.894	0.291	0.321
BLUE2	0.849	0.112	0.125
BLUE3	0.823	0.121	0.153
BLUE4	0.746	0.061	0.072