Adversarial Example in Machine Learning The program has two parts: A CNN model which we try to fool. Create eyeclasses frame (only pixels from that area is perturbed) Based on the work Accessorize to a Crime