吴帆0106

学习笔记18

• 尝试给产生的对抗样本增加小规模的noise，发现增加很小的噪声就会让对抗攻击失败,对抗算法不够鲁棒
  加入的噪音向量：

[[[  5.00000024e-04   6.00000028e-04   0.00000000e+00 ...,   6.99999975e-04
     6.00000028e-04   3.00000014e-04]
  [  8.99999985e-04   6.99999975e-04   3.99999990e-04 ...,   1.99999995e-04
     6.00000028e-04   6.00000028e-04]
  [  6.00000028e-04   1.99999995e-04   3.99999990e-04 ...,   6.99999975e-04
     3.99999990e-04   9.99999975e-05]
  ..., 
  [  8.99999985e-04   5.00000024e-04   6.00000028e-04 ...,   6.00000028e-04
     3.99999990e-04   0.00000000e+00]
  [  6.00000028e-04   8.99999985e-04   8.99999985e-04 ...,   6.99999975e-04
     3.00000014e-04   7.99999980e-04]
  [  6.00000028e-04   1.99999995e-04   3.00000014e-04 ...,   7.99999980e-04
     0.00000000e+00   3.00000014e-04]]
 [[  6.99999975e-04   9.99999975e-05   3.00000014e-04 ...,   8.99999985e-04
     0.00000000e+00   9.99999975e-05]
  [  3.99999990e-04   6.00000028e-04   3.99999990e-04 ...,   0.00000000e+00
     8.99999985e-04   5.00000024e-04]
  [  9.99999975e-05   7.99999980e-04   8.99999985e-04 ...,   0.00000000e+00
     6.00000028e-04   7.99999980e-04]
  ..., 
  [  3.00000014e-04   8.99999985e-04   0.00000000e+00 ...,   3.99999990e-04
     9.99999975e-05   3.99999990e-04]
  [  0.00000000e+00   0.00000000e+00   5.00000024e-04 ...,   9.99999975e-05
     6.99999975e-04   6.99999975e-04]
  [  0.00000000e+00   8.99999985e-04   5.00000024e-04 ...,   3.99999990e-04
     8.99999985e-04   6.00000028e-04]]
 [[  8.99999985e-04   3.00000014e-04   6.00000028e-04 ...,   9.99999975e-05
     3.99999990e-04   9.99999975e-05]
  [  6.00000028e-04   1.99999995e-04   1.99999995e-04 ...,   3.00000014e-04
     7.99999980e-04   6.99999975e-04]
  [  6.00000028e-04   1.99999995e-04   8.99999985e-04 ...,   6.99999975e-04
     3.99999990e-04   0.00000000e+00]
  ..., 
  [  9.99999975e-05   6.00000028e-04   3.99999990e-04 ...,   5.00000024e-04
     0.00000000e+00   3.00000014e-04]
  [  9.99999975e-05   3.99999990e-04   6.00000028e-04 ...,   9.99999975e-05
     0.00000000e+00   6.00000028e-04]
  [  8.99999985e-04   8.99999985e-04   7.99999980e-04 ...,   5.00000024e-04
     1.99999995e-04   6.00000028e-04]]]

分类结果：

Original label =  n03538406 horse cart
Noise+Perturbed label =  n03538406 horse cart
Perturbed label =  n02437312 Arabian camel

• 实验另外一种算法的鲁棒性：《Fast Feature Fool: A data independent approach to universal adversarial perturbations》，重新看了文章和代码
  运行的时候报错

IOError: [Errno socket error] [Errno 101] Network is unreachable

查了一下是因为被墙了，所以打算先配一个ss