Patch Attack Invariance: How Sensitive are Patch Attacks to 3D Pose?

Max Lennon, Nathan Drenkow, Philippe Burlina

Perturbation-based attacks, while not physically realizable, have been the main emphasis of adversarial machine learning (ML) research. Patch-based attacks by contrast are physical…