sunjialiang
Results
2
comments of
sunjialiang
 Hello, I use the autoattack with standard and non-individual version. It outputs four robust accuracies under four attacks. Which robust accuracy should I choose at last as the evaluation...
请问您这边复现出来了吗