CycleBooster

The results of LID for detecting PGD-L∞(8) is much lower than the paper

1

HI! I want to get the results of each type of adversarial example detection as the baseline. Because the max_iter should be 5 in my paper rather than the default...