Attack effectiveness in both digital and physical domains. ASRs in the digital domain are averaged over 20 test images, while physical domain ASRs are averaged only on the set of images successfully attacked in the digital domain. PSNR is calculated exclusively within the license plate region, where perturbations are applied using a masking strategy.
| Attack Method | ASR (%) Digital Domain | PSNR (dB) | ASR (%) Printed Domain |
|---|---|---|---|
| I-FGSM (EOT) | 95% | 23.71 | 57.89% |
| I-FGSM (EOT + P&S) | 95% | 22.24 | 73.68% |
| Attack Method | ASR (%) Digital Domain | PSNR (dB) | ASR (%) Printed Domain |
|---|---|---|---|
| I-FGSM (EOT) | 95% | 23.71 | 57.89% |
| I-FGSM (EOT + P&S) | 95% | 22.24 | 73.68% |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.