Adversarial Training against Location-Optimized Adversarial Patches

Open in new window