Department of Computer Science and Engineering, Washington University in St. Louis
defense against physical attacks;adversarial machine learning
Defending Against Physically Realizable Attacks on Image Classification