affiliation not provided to SSRN
Infrared vehicle detection, Adversarial patch, Multiply angles black-box attacks, Coating material, Environmental adaptation