Adversarial scratches: Deployable attacks to CNN classifiers

•We present Adversarial Scratches, a powerful attack to CNN classifiers.•Adversarial Scratches are designed to be deployable over a target image region.•We adopt Bezier Curves to reduce the dimensionality of the search space.•Adversarial Scratches yield state-of-the-art performance amongst deployable attacks.•We propose image filtering defenses and investigate their impact on healthy images.