The good achievement of deep neural networks (DNNs) is threatened by the vulnerability to adversarial examples. Lately, adversarial attacks in the actual physical domain, for occasion, employing the laser beam as an adversarial perturbation, have been proven to be powerful attacks to DNNs. Automatic recognition of street signs can be […]