cg563 / simple-blackbox-attack

Code for ICML 2019 paper "Simple Black-box Adversarial Attacks"
MIT License
191 stars 56 forks source link

I want to know in run_simba.py file, why can batchfile guarantee that attacks are carried out on images that are correctly classified? #25

Closed Kitzzaaa closed 1 year ago

Kitzzaaa commented 2 years ago

I want to know in run_simba.py file, why can batchfile guarantee that attacks are carried out on images that are correctly classified?

cg563 commented 2 years ago

The batch file is generated by running lines https://github.com/cg563/simple-blackbox-attack/blob/master/run_simba.py#L55-L63, which repeatedly samples data from the validation set as long as the batch of samples is not fully correctly classified. Does this help?