Abstract: Autonomous driving systems critically depend on accurately classifying traffic signs, a task that is jeopardized by adversarial attacks. This paper focuses on the relatively unexplored ...