IBM/Autozoom-Attack

L2dist can‘t convergence

Closed this issue · 2 comments

Hi,
I run your code on my dataset.
After finding the adversarial example, the L2 distance is larger as the number of iterations increases.
It looks like that the estimated gradient can't guide the direction of the drop in L2 distance.
Do you have any advice?
Thanks!

Hi,

It seems like AutoZOOM cannot find a good estimation for the gradient vector. I would suggest to increase the number of random vector ( specified by the option num_rand_vec) to improve the estimation of the gradient vector.

Bests,
Chun-Chen

Thanks for your reply!
I will try again according to your suggestion.