IBM / Autozoom-Attack

Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks” ​​​​, published at AAAI 2019
https://arxiv.org/abs/1805.11770
Apache License 2.0
57 stars 22 forks source link

Question about attacking to the ResNet #5

Closed yxwang-10 closed 5 years ago

yxwang-10 commented 5 years ago

Hi, I try to perform the Autozoom-ae attack on the ResNet with was pretrained by the tensorflow .But i have some problems,i modified the prediction function so that the value of the images between 0 and 255 and also reduce the men of the imagenet dataset,but when run the iteration of the attack,the loss1 is always 0.