SLAP: improving physical adversarial examples with short-lived adversarial perturbations - Lovisotto, G; Turner, H; Sluganovic, I; Strohmeier, M; Martinovic, I (Proceedings of the 30th USENIX Security Symposium, 2021)