Open machanic opened 4 years ago
In https://github.com/dydjw9/MetaAttack_ICLR2020/blob/master/meta_attack/meta_attack_cifar/attacks/cw_black.py#L112 It seems the input image is bounded by [-1,1] because of self.clip_min = -1. However, in most black box attack code , the input is [0,1]. What is your range?
self.clip_min = -1
In https://github.com/dydjw9/MetaAttack_ICLR2020/blob/master/meta_attack/meta_attack_cifar/attacks/cw_black.py#L112 It seems the input image is bounded by [-1,1] because of
self.clip_min = -1. However, in most black box attack code , the input is [0,1]. What is your range?