About the source model (ResNet50) in DRA attack.

[Zhijin-Ge]

Hi, I'm having a problem reproducing the DRA code and would appreciate your help!

In the DRA codes, you provided the ResNet code in the ’./models‘ folder. When using the resnet50 model that you provided, I can very successfully reproduce the attack, the attack performance on resnet101 can achieve 99.5%. But when using the resnet50 model from 'torchvision.models', the attack performance on resnet101 only can achieve 68%. Is there any difference between the resnet50 model you provide and the model in torchvision?