REAP

REAP is a digital benchmark that allows the user to evaluate patch attacks on real images, and under real-world conditions. Built on top of the Mapillary Vistas dataset, the benchmark contains over 14,000 traffic signs. Each sign is augmented with a pair of geometric and lighting transformations, which can be used to apply a digitally generated patch realistically onto the sign.

Source: REAP: A Large-Scale Realistic Adversarial Patch Benchmark

Image Source: https://arxiv.org/pdf/2212.05680v1.pdf