Closed amuamushu closed 2 years ago
Main difference in trainsin config:
A difference between how Taewan and we perturb the images is Taewan perturbs before running the image through the model. It doesn't seem like he saves the perturbed image itself, rather he saves the properties of the perturbed image in the feed dictionary.
We would have to perturb as the model is running because we perturb on the image rois.
We plan on formatting our adversarial training to be similar to trainsin since it would make incorporating adversarial examples easier.
To make sure we are implementing our adversarial training correctly, we need to figure out what are the differences between the two.