locuslab/fast_adversarial

indices

AliLotfi92 opened this issue · 1 comments

Can anyone please let me know if it's necessary to just update the \deltas of those images that are not misclassified? Can't we just update all \detla s? Which also ensures its maximization.

I = output.max(1)[1] == y

Hi @AliLotfi92 !

For MNIST at epsilon=0.3 in particular, this stabilizes the training procedure (without it in this setting sometimes the training process never learns anything and doesn't converge). You can probably get the same effect without it by tweaking other parameters.

~Eric