REAP: A Large-Scale Realistic Adversarial Patch Benchmark

Nabeel Hingun, Chawin Sitawarin, Jerry Li +1

Machine learning models are known to be susceptible to adversarial perturbation. One famous attack is the adversarial patch, a sticker with a particularly crafted pattern that make…