Proposing AdvIG for efficient black-box query attacks using geometric shapes in infrared physical attacks.
