Abstract: To assess the vulnerability of deep neural networks in the physical world, many studies have introduced adversarial examples and applied them to computer vision tasks such as object ...