Does this work on L-2 norm based attacks?

[RaymondGsc]

[xuanqing94]

I didn't test L2 norm attacks, but I think the results should be the same. The only change we need to make is to replace linf_sgd.py in /attacker directory with the standard SGD in pytorch.