Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd
Upload
3 views

Assignment 1 (1)

The document contains exercises related to attack success rates and approximation functions. It includes data tables comparing various epsilon values and their corresponding success rates and processing speeds for different methods. Additionally, it poses a question regarding the comparison of two approximation functions based on their errors relative to a ground truth function.

Uploaded by

Nicole Oo
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
3 views

Assignment 1 (1)

The document contains exercises related to attack success rates and approximation functions. It includes data tables comparing various epsilon values and their corresponding success rates and processing speeds for different methods. Additionally, it poses a question regarding the comparison of two approximation functions based on their errors relative to a ground truth function.

Uploaded by

Nicole Oo
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 8

Exercise 1

Sorry for the messy writing, my


answers are in the green box:(
Exercise 2 Exercise 3
eps Attack Success Rate eps FGSM / s PGD / s C&W / s

0.01 0.0 0.01 0.122751 0.023956 1.468470

0.05 0.0 0.02 0.027936 0.024802 1.382617

0.1 0.4 0.05 0.286024 0.023480 1.474934

0.2 0.4 0.1 2.356167 0.501723 1.722761

0.2 1.703952 0.495412 1.401726


Exercise 4

x5 >= x3, x6 >= x4,


x5 <= 0.5x3+1, x6 <= 0.5x4+1,
l5 = -2, l6 = -2,
u5 = 2 u6 = 2
Exercise 4
Qn) Looking at the results, which of the two abstractions is better?

We are given two approximation functions to compare,


approximation (a) and approximation (b).

The error of each abstraction can be measured by integrating


over the difference between the ground truth function (ReLU)
and its approximation function, denoted as

(a) (b)
Exercise 4
Qn) Looking at the results, which of the two abstractions is better?
Exercise 5
Exercise 5
Exercise 5

You might also like