Fig. 6From: Perturbing BEAMs: EEG adversarial attack to deep learning models for epilepsy diagnosingDifferent multilayer architectures and Victim models; C: ConvNet; Max: maximum pooling layer; FC: fully connected layer; SM: softmax layer; Conv: 2D convolutional layer; L: LSTM layerBack to article page