[QUESTION]

[ShuchunXu]

❔ Any questions

When I use the pgd.py to attack my model, I find that the model predicts the adversarial example to the last class classes in all classes. That is unusual, can you tell me why? @nguyenvulong @Framartin @noppelmax @khalooei