search

yuyang-long / SSA

Spectrum simulation attack (ECCV'2022 Oral) towards boosting the transferability of adversarial examples
Apache License 2.0
88 stars 10 forks source link

Question about delta #2

Closed Unkrible closed 2 years ago

Unkrible commented 2 years ago

Hello, According to Eq(6) in paper, $g = \nabla{x} J ( T(x), y; \phi)$ In attack.py/Line95, $g = \nabla{T(x)} J(T(x), y; \phi)$

Does this changed gradient make a difference?

yuyang-long commented 2 years ago

The changed gradient has little effect on the attack success rate, difference is only about 1%. We do this mainly to speed up backpropagation.