Generating transformed images on pre-generated adversarial images

[gurgehjm]

https://github.com/facebookresearch/adversarial_image_defenses/blob/c5362e31f3e272139d65ad276ab7273f17df305a/adversarial/lib/dataset.py#L38

In the code above, we have 'if not preprocessed:and inload_adversarialwe havepreprocessed=args.preprocessed_data` :

https://github.com/facebookresearch/adversarial_image_defenses/blob/c5362e31f3e272139d65ad276ab7273f17df305a/adversarial/lib/dataset.py#L78-L80

But args.preprocessed_data is used for images that already have transformations/defenses applied (using your terminology, transformations and defenses are synonymous correct?), not when adversaries are already applied.

But how you are using "preprocessed" in _load_adversarial_helper implies you are speaking about if attacks have been preprocessed.

I think this might be a bug.

[gurgehjm]

Okay I see, it's just L2 dissimilarity.