Fig. 5From: Multitask adversarial attack with dispersion amplificationExamples of attacked images with DA and DR attacks. Both attacks performed on the 0.4 of the NN depth. Target network for those examples was MobileNetV2Back to article page