Fig. 1

a Adversarial samples generated with AlexNet [11] in [10]. The left column shows the correctly predicted samples, and the middle column is the magnified value of perturbations. The adversarial samples and target labels are shown in the rightmost column. b Fake fingerprints made from different materials and cheating authentication system or unlocking smartphones with them