The goal of this project was to attack a JetBot embedded image classifier (https://jetbot.org/master/examples/collision_avoidance.html) with adversarial patches.
One of the challenges was to generate fake digital images attacked by a patch taking into account the distortion of the camera, its noise and its tilt.
More information can be found in the paper (.pdf).
attack_github.mp4
The full video and two others can be found here : https://drive.google.com/drive/folders/14Z4wmOgZl15x2TCZS4fOQZop32LfqaFO?usp=share_link.