There are two ways to use the API:
To use the criteria:
raw_advs, clipped_advs, success = attack(fmodel, data, criterion=Misclassification(label), epsilons=args.eps)
and without using the criteria:
raw_advs, clipped_advs, success = attack(fmodel, data, label, epsilons=args.eps)
What is the difference?
Unfortunately, haven't found examples anywhere.
There are two ways to use the API:
To use the criteria:
and without using the criteria:
What is the difference?
Unfortunately, haven't found examples anywhere.