The attack success rate vs. perturbation budget curves of the models against dodging attacks under the norm. The attack success rate vs. perturbation budget curves of the models against impersonation ...