fig.tex

\begin{figure}[t]
\begin{center}
\includegraphics[width=1in,height=1in]{images/flute.png}
\hspace{0.1cm}
\includegraphics[width=1in,height=1in]{pictures/adv12.png}
\hspace{0.1cm}
\includegraphics[width=1in,height=1in]{images/carpenter_kit.png}
\end{center}

\begin{center}
\includegraphics[width=1in,height=1in]{images/microphone.png}
\hspace{0.1cm}
\includegraphics[width=1in,height=1in]{images/mouth-harp.png}
\hspace{0.1cm}
\includegraphics[width=1in,height=1in]{images/jigsawpuzzle.png}
\end{center}

\begin{center}
    \caption{Examples of images after adding adversarial perturbation. Label of clean image (left to right, top to bottom): violin, steel arch bridge, lotion,  stove, abacus, barber chair. Label of adversarial images (left to right, top to bottom): flute, racket, carpenter's kit, microphone, mouth-harp, jigsaw puzzle}
\end{center}
\end{figure}