News
For the requirements of physical attack, we further constrain the patch in object region and utilize elaborate criteria to evaluate its naturalness to alleviate the distortion when applying the patch ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results