  In this talk we describe our content-preserving attack on object detectors,
ShapeShifter, and demonstrate how to evaluate this threat in realistic
scenarios. We describe how we use CARLA, a realistic urban driving simulator,
to create these scenarios, and how we use ShapeShifter to generate
content-preserving attacks against those scenarios.
