Fig. 4From: Smooth adversarial examplesMAD scores [35] of sC&W vs. C&W for all images of ImageNet. For 93% of the images below the diagonal, sC&W is less perceptible than C&W according to MAD scoreBack to article page