ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector
Towards Evaluating the Robustness of Neural Networks