fig.tex

\begin{figure*}[t]
\begin{center}
\includegraphics[width=1.4in,height=1.4in]{pictures/vgg16_envelope.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/vgg16_horsecart.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/vgg16_tablelamp.png}
\end{center}

\begin{center}
\includegraphics[width=1.4in,height=1.4in]{pictures/inc_envelope.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/inc_horsecart.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/inc_tablelamp.png}
\end{center}

\begin{center}
\includegraphics[width=1.4in,height=1.4in]{pictures/resnet18_envelope.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/resnet18_horsecart.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/resnet18_tablelamp.png}
\end{center}

\begin{center}
\includegraphics[width=1.4in,height=1.4in]{pictures/resnet50_envelope.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/resnet50_horsecart.png}
\hspace{0.2cm}
\includegraphics[width=1.4in,height=1.4in]{pictures/resnet50_tablelamp.png}
\end{center}

\begin{center}
    \caption{Semi-universal adversarial perturbation for (top to bottom) VGG16, Googlenet, Resnet-18, and Resnet-50 models with image class as (left to right) envelope, horse-cart and table lamp.}
\end{center}
\end{figure*}