- Trained a YOLOv5 detector to recognise ads with 90 % mIoU baseline accuracy.
- Crafted adversarial image patches that reduce detection rates 15 % while remaining visually innocuous.
- Analysed specific convolutional filters to pinpoint vulnerability surfaces.
- Retrained & fine‑tuned the model to assess recovery strategies.