Paul Andrei Sava, Jan-Philipp Schulze, Philip Sperl, Konstantin Böttinger: Assessing the Impact of Transformations on Physical Adversarial Attacks. AISec@CCS 2022: 79-90