Attack pipeline for generating robust adversarial examples in license plate detection (LPD). The process includes input preprocessing, mask-based perturbation, iterative optimization, and resizing for physical-world applicability.