1 code implementation • 1 Jun 2019 • Sid Ahmed Fezza, Yassine Bakhti, Wassim Hamidouche, Olivier Déforges
However, all the works proposed in the literature for generating adversarial examples have used the $L_{p}$ norms ($L_{0}$, $L_{2}$ and $L_{\infty}$) as distance metrics to quantify the similarity between the original image and the adversarial example.