diff --git a/README.md b/README.md
index 18b3517..9349417 100644
--- a/README.md
+++ b/README.md
@@ -4,8 +4,7 @@ Case study of the FCA. The code can be find in [FCA]([http://]).
 
 ### Cases of digital attack
 
-![image](https://github.com/winterwindwang/Full-coverage-camouflage-adversarial-attack/blob/gh-pages/assets/distance_10_elevation_30_adv_pred.gif)
-
+<img src = 'https://github.com/winterwindwang/Full-coverage-camouflage-adversarial-attack/blob/gh-pages/assets/distance_10_elevation_30_adv_pred.gif?raw=true'/>
 ### Cases of multi-view robust
 
 
@@ -14,6 +13,5 @@ Case study of the FCA. The code can be find in [FCA]([http://]).
 
 #### Different combination of loss terms
 
-![image](https://github.com/winterwindwang/Full-coverage-camouflage-adversarial-attack/blob/gh-pages/assets/abaltion_study_loss.png)
-
+<img src = 'https://github.com/winterwindwang/Full-coverage-camouflage-adversarial-attack/blob/gh-pages/assets/abaltion_study_loss.png?raw=true'/>
 As we can see from the Figure, different loss term plays different role in attacking. For example, the camouflaged car generated by `obj+smooth (we omit the smooth loss, and denotes as obj)` hardly hidden from the detector, while the camouflaged car generated by `iou` successfully suppress the detecting bounding box of the car region, and finally the camouflaged car generated by `cls` successfully make the detector to misclassify the car to anther category.