Bin Ye, Huilin Yin, Jun Yan, Wancheng Ge: Patch-Based attack on traffic sign recognition. ITSC 2021: 164-171