search

fra31 / auto-attack

Code relative to "Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks"
https://arxiv.org/abs/2003.01690
MIT License
639 stars 111 forks source link

Softmax probabilities instead of logits #102

Closed fugokidi closed 1 year ago

fugokidi commented 1 year ago

Thank you for the open source auto-attack. I have a soft-voting ensemble which outputs the average of softmax probabilities. Since softmax is not invertible, I cannot convert probabilities to logits. Is it ok to provide softmax probabilities instead of logits to auto-attack?

ScarlettChan commented 1 year ago

您好，您的邮件已收到!

fra31 commented 1 year ago

Hi,

using the softmax output should work fine. However, you might also want to have a look a some methods designed specifically for ensembles like this.

Hope this helps!

fugokidi commented 1 year ago

@fra31 Thank you. It's helpful.