This is the supplementary materials for paper "D-square-B: Deep Distribution Bound for Nature-looking Adversarial Attack". We post the samples for human study here.
We randomly select over 100 images from test set for human study. The adversarial samples from different attack settings can be found under the folder "samples". The details can be found at the ReadMe in the sub-directory.