Closed sevenPot7 closed 4 months ago
The primary distinction between using the sum
and mean
functions to compute gradients lies merely in a constant factor. When the sign
function is employed in the attack, this difference does not impact the overall performance.
May I ask if I can try to generate adversarial samples using ResNet50 or ResNet152 as proxy models? For example, Python main. py -- input_ir/ path/to/data --output_dir adv_data/logit/resnet18_targeted --attack logit --model=resnet50 --targeted
目标攻击中的logit损失大多都是如下这样写
请问为什么要求sum()? 如果改成mean()会对结果有影响吗?