Mirko comments

Repositories
Issues
Comments

Results 1 comments of


                                            Mirko

The attack is performed on GT label and not on the label predicted by the model on the clean image

Ok thank you. I have another question, how do you calculate the success rates results in Table 2 for clean and adversarial in the paper? In the clean conf. the...