ryder

We do agree that security is the worst-case guarantee, and no system/model is absolutely secure from this perspective. However, from a practical or statistical point of view, security is often...

Fixed in https://github.com/kleincup/DEEPSEC/commit/d4e1181e84beef8e6ef5d5d86d87df015e98fb94 in defining the model for both MNIST and CIFAR10, though it is suggested by PyTorch officially (https://github.com/pytorch/examples/blob/master/mnist/main.py). Nothing needs to be changed in our implementation of BIM...