Evaluating Adversarial Attacks on Traffic Sign Classifiers beyond Standard Baselines

Svetlana Pavlitska, Leopold Müller, J. Marius Zöllner

Adversarial attacks on traffic sign classification models were among the first successfully tried in the real world. Since then, the research in this area has been mainly restricte…