Fig. 6From: Attacking convolutional neural network using differential evolutionOriginal-target class pairs. Heat maps of the number of times a successful attack is present with the corresponding original-target class pair on three types of networks with attacks based on local-optimized DE 0.1/0.1/0.1. Red and blue indices indicate respectively the original and target classes. The number from 0 to 9 indicates respectively the following classes in numerical order: airplane, automobile, bird, cat, deer, dog, frog, horse, ship, and truckBack to article page