simple-blackbox-attack
simple-blackbox-attack copied to clipboard
I want to know in run_simba.py file, why can batchfile guarantee that attacks are carried out on images that are correctly classified?
I want to know in run_simba.py file, why can batchfile guarantee that attacks are carried out on images that are correctly classified?
The batch file is generated by running lines https://github.com/cg563/simple-blackbox-attack/blob/master/run_simba.py#L55-L63, which repeatedly samples data from the validation set as long as the batch of samples is not fully correctly classified. Does this help?