Fig. 6From: Smooth adversarial examplesOperating characteristics over ImageNet attacking InceptionV3 (solid lines) and ResNetV2-50 (dotted lines)Back to article page