Closed ajing closed 4 years ago
This code is submitted for NIPS2017 Targeted Adversarial Attack competition. We notice that a lot of defense submissions are baseline inception_v3 and ens_adv_inception_resnet_v2 models, so we put a higher weight for them. You can adjust the weights for your purpose.
Do you have any assumptions about the model population?