1 paper
Jinlei Wang, Jiahuan Long, Mingkai Sun +9
Physical adversarial attacks against person detectors have evolved from localized patches to full-body textures. However, achieving both visual naturalness and strong attack effect…