search

dongyp13 / Targeted-Adversarial-Attack

A targeted adversarial attack method, which won the NIPS 2017 targeted adversarial attacks competition
Apache License 2.0
129 stars 38 forks source link

How do you guys determine the weight when you do ensemble? #1

Closed ajing closed 4 years ago

ajing commented 6 years ago

Do you have any assumptions about the model population?

dongyp13 commented 6 years ago

This code is submitted for NIPS2017 Targeted Adversarial Attack competition. We notice that a lot of defense submissions are baseline inception_v3 and ens_adv_inception_resnet_v2 models, so we put a higher weight for them. You can adjust the weights for your purpose.