IndexError in CarliniL2Method about adversarial-robustness-toolbox HOT 7 CLOSED

Thank you @weitianli I'm looking into it.

from adversarial-robustness-toolbox.

Hi, @weitianli! Fix is now out, please install from clone for the issue to be solved. Let us know if you encounter any further problems!

from adversarial-robustness-toolbox.

@weitianli Normally, with the new version of the attack, an max_iter value significantly smaller than 1000 should suffice. Before we were using gradient descent with decayed learning rate for minimizing the CWL2 objective, now we are using binary line search which should converge faster and be more stable. Please let us know if you have any issues with determining the right value for this parameter.

from adversarial-robustness-toolbox.

Thank you very much! I will try it!

from adversarial-robustness-toolbox.

I have a small problem about the max_iter. I found your tutorial code about cw set max_iter is 10. Is it the same effect like Cleverhans tutorial(max_iter=100) or CW(max_iter=1000) original version?
Also, I have a small problem about eps in FGSM calculation. Is eps formula in ART is 1*(1/255)?
Thank you very much!
@mathsinn @ririnicolae

from adversarial-robustness-toolbox.

@weitianli What is the problem you encounter with max_iter in C&W? What about the one on the eps value in FGSM? I would say the number of iterations is not strictly equivalent to the other implementations, just that in ART a small number of iterations should suffice. The eps value depends on the data range of your classifier. For example, if your data is normalized between 0 and 1, eps should also be in that range. If your data is between 0 and 255, eps can take values up to 255.

from adversarial-robustness-toolbox.

I got it. Thank you for your kind response.

from adversarial-robustness-toolbox.