search

paullintilhac / cosc189-project

MIT License
0 stars 0 forks source link

how is l2 attack different from fg and l-bfgs? #25

Open paullintilhac opened 2 years ago

paullintilhac commented 2 years ago

related question: does epsilon in the fg attack actually correspond to the distortion of the image? Or is that just the coefficient of the gradient in each iteration? If so, eps isn't a great measure of the distortion and we should really be using the distance.

paullintilhac commented 2 years ago

@uttam-rao do you think we can close this now?