using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.3 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.2 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.6 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.4 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.7 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.2 s)
max Linf perturbation: 0.94944, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.2 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.94815, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.4 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 0.00%
max Linf perturbation: 0.00000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.3 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 328.4 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 306.8 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.4 s)
max Linf perturbation: 0.94956, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 424.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 306.5 s)
max Linf perturbation: 0.94916, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 306.7 s)
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 406.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94919, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 348.8 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 499.1 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.5 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 382.8 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.9 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.9 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.4 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 382.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 289.1 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 439.5 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94915, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.1 s)
max Linf perturbation: 0.94887, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 274.3 s)
max Linf perturbation: 0.94949, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.6 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.3 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 329.5 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 216.4 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 345.1 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.5 s)
max Linf perturbation: 0.94924, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.2 s)
max Linf perturbation: 0.94900, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.8 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 216.1 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.1 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.9 s)
max Linf perturbation: 0.94939, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 363.9 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 216.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.8 s)
max Linf perturbation: 0.94968, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 313.2 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 387.3 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 347.4 s)
max Linf perturbation: 0.94926, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 363.9 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 216.0 s)
max Linf perturbation: 0.94968, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 240.3 s)
max Linf perturbation: 0.94791, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.3 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 181.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 295.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 313.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 427.4 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 3 out of 7 successfully perturbed
robust accuracy after APGD-CE: 40.00% (total time 289.1 s)
apgd-dlr - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 474.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.1 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 364.7 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 330.6 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.1 s)
max Linf perturbation: 0.94941, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 427.4 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.8 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 404.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 401.5 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.3 s)
max Linf perturbation: 0.94971, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.3 s)
max Linf perturbation: 0.94915, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 249.0 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 399.2 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 381.4 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 145.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 237.9 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 297.4 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.0 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 293.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 405.3 s)
max Linf perturbation: 0.94826, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 2 out of 5 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 215.1 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 364.8 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 381.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 348.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 441.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 145.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 239.1 s)
max Linf perturbation: 0.94895, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.4 s)
max Linf perturbation: 0.94924, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.0 s)
max Linf perturbation: 0.94934, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.8 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.4 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 461.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94936, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 348.0 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 497.9 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.9 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94930, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 289.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 405.7 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94947, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.6 s)
max Linf perturbation: 0.94977, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 344.9 s)
max Linf perturbation: 0.94951, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.94977, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 344.8 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 311.1 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.6 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.3 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.4 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.5 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.1 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 362.5 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.5 s)
max Linf perturbation: 0.94925, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 404.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.4 s)
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 181.1 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 294.9 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.9 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.1 s)
max Linf perturbation: 0.94903, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.0 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 306.6 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.5 s)
max Linf perturbation: 0.94822, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.5 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 312.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.4 s)
max Linf perturbation: 0.94956, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.6 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 306.8 s)
max Linf perturbation: 0.94826, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.1 s)
max Linf perturbation: 0.94911, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.7 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 462.2 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.1 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 403.2 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.3 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.2 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.8 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94932, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 340.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.7 s)
max Linf perturbation: 0.94923, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94952, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 293.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 237.9 s)
max Linf perturbation: 0.94887, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.0 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.5 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.2 s)
max Linf perturbation: 0.94901, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.1 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 306.7 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 403.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.8 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 340.5 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.7 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.2 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94714, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 181.0 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 313.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 407.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.0 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 216.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.1 s)
max Linf perturbation: 0.94948, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 250.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 364.0 s)
max Linf perturbation: 0.94942, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94906, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 216.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.8 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 290.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 404.1 s)
max Linf perturbation: 0.94932, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 290.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 404.1 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.8 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 274.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.7 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 274.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94917, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 216.1 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 313.2 s)
max Linf perturbation: 0.94888, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.2 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 383.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94940, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.6 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.1 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 402.3 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.2 s)
max Linf perturbation: 0.94914, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 381.1 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.2 s)
max Linf perturbation: 0.94909, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 10.00%
apgd-ce - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 89.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.3 s)
max Linf perturbation: 0.00000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 381.4 s)
max Linf perturbation: 0.94911, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94977, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 402.3 s)
max Linf perturbation: 0.94944, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 238.6 s)
max Linf perturbation: 0.94968, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 288.9 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 439.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.7 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.4 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.7 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 342.7 s)
max Linf perturbation: 0.94946, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 274.1 s)
max Linf perturbation: 0.94971, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94907, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 405.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 363.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.6 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 410.6 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.8 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.5 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.3 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.5 s)
max Linf perturbation: 0.94936, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.3 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 273.9 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.2 s)
max Linf perturbation: 0.94907, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.1 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.94934, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.1 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.5 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 399.5 s)
max Linf perturbation: 0.94963, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.7 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 328.2 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 381.4 s)
max Linf perturbation: 0.94924, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94957, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.2 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.4 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 145.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 260.0 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.2 s)
max Linf perturbation: 0.94907, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.93328, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.5 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 461.3 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.3 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 382.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 475.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.1 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.5 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 214.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.0 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.4 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 362.3 s)
max Linf perturbation: 0.94735, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 146.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 259.6 s)
max Linf perturbation: 0.94740, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 312.1 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 425.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 271.9 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.3 s)
max Linf perturbation: 0.94925, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94903, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.1 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 312.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.0 s)
max Linf perturbation: 0.94963, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.5 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.1 s)
max Linf perturbation: 0.94873, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.1 s)
max Linf perturbation: 0.94962, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.4 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 340.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94918, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 379.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.6 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.3 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 361.8 s)
max Linf perturbation: 0.94930, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 424.7 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 401.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.7 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 461.6 s)
max Linf perturbation: 0.94955, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94859, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.2 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 401.6 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 293.3 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 461.5 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 145.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 238.0 s)
max Linf perturbation: 0.94671, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.3 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94957, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.9 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 306.9 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 248.7 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 398.4 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 237.7 s)
max Linf perturbation: 0.94867, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94815, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.5 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94956, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.0 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 362.0 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 288.7 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 438.8 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 249.0 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 399.0 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.0 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.2 s)
max Linf perturbation: 0.94884, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.5 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 381.3 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 293.7 s)
max Linf perturbation: 0.94910, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.8 s)
max Linf perturbation: 0.94939, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94962, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.5 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.8 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 461.7 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.7 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 0.00%
max Linf perturbation: 0.00000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 461.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.94947, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.5 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.2 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 109.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 203.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 109.9 s)
max Linf perturbation: 0.94702, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94948, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.3 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.5 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.1 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.1 s)
max Linf perturbation: 0.94865, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.2 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.5 s)
max Linf perturbation: 0.94977, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 250.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 364.1 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 384.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 313.5 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.0 s)
max Linf perturbation: 0.94754, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 384.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 350.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 443.9 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 240.2 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.9 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 310.4 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 313.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 429.2 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.2 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 384.8 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 313.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 407.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.2 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.9 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.6 s)
max Linf perturbation: 0.80392, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 384.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 499.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 274.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
robust accuracy after APGD-DLR: 10.00% (total time 342.7 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.9 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.2 s)
max Linf perturbation: 0.94922, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 289.1 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 439.4 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 289.3 s)
apgd-dlr - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 439.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 405.8 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 274.7 s)
max Linf perturbation: 0.94951, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 310.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 405.5 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 312.0 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 462.5 s)
max Linf perturbation: 0.94939, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 289.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 403.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.6 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94905, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.3 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.7 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 405.3 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 240.1 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.5 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.6 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 381.4 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94958, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 384.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94947, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.5 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 249.1 s)
apgd-dlr - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 399.3 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.6 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 407.4 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 311.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 10.00%
apgd-ce - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 91.7 s)
max Linf perturbation: 0.94807, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 404.0 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 1 out of 4 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 180.4 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.6 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.2 s)
max Linf perturbation: 0.94853, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.5 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 381.4 s)
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 438.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 293.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 404.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.3 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 401.6 s)
max Linf perturbation: 0.94971, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 362.0 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 381.2 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.5 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.1 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 382.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 496.0 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94886, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 248.8 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 398.6 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 308.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
robust accuracy after APGD-CE: 20.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.1 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.6 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.7 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 461.8 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.4 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.2 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 294.1 s)
max Linf perturbation: 0.94872, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.7 s)
max Linf perturbation: 0.94894, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 403.3 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 379.9 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 249.1 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 399.2 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.9 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 348.6 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 498.6 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.3 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.6 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 312.3 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 462.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
max Linf perturbation: 0.94888, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 328.5 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 2 out of 5 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 365.3 s)
max Linf perturbation: 0.94735, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.94872, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 10.00%
apgd-ce - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 89.1 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94916, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.0 s)
max Linf perturbation: 0.94748, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.6 s)
max Linf perturbation: 0.94917, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 1 out of 4 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 180.4 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 330.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.3 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.5 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 403.7 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.4 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94884, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 403.4 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.9 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94903, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.0 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 347.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.5 s)
max Linf perturbation: 0.94882, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 344.1 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 350.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 443.9 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.5 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 146.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 260.6 s)
max Linf perturbation: 0.93656, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94888, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.3 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.9 s)
max Linf perturbation: 0.94909, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 310.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.0 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 313.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 407.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.2 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 384.2 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 250.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 364.3 s)
max Linf perturbation: 0.94888, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 216.0 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 290.1 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 313.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 407.1 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 424.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.94947, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94925, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.2 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 362.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.94920, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 404.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.1 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 328.2 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.9 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 401.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.1 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.7 s)
max Linf perturbation: 0.94789, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.1 s)
max Linf perturbation: 0.94917, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 203.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.94860, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 426.3 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.9 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 381.2 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.1 s)
max Linf perturbation: 0.94570, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.1 s)
max Linf perturbation: 0.94941, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 439.1 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.6 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.4 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.8 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.1 s)
max Linf perturbation: 0.94958, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.0 s)
max Linf perturbation: 0.94952, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94946, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.4 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 312.2 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 312.1 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 426.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.1 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.9 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94953, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 403.1 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 379.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 273.2 s)
max Linf perturbation: 0.94906, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.2 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 379.9 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.1 s)
max Linf perturbation: 0.94941, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.0 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 328.9 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 146.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 259.8 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 312.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.6 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 425.1 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.8 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 402.3 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 344.8 s)
max Linf perturbation: 0.94948, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.8 s)
max Linf perturbation: 0.94741, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 384.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 344.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 402.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.5 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 461.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.9 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 329.2 s)
max Linf perturbation: 0.94922, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 328.9 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.4 s)
max Linf perturbation: 0.94927, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 239.1 s)
max Linf perturbation: 0.94870, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.9 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.3 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 425.1 s)
max Linf perturbation: 0.94932, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.1 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 309.3 s)
max Linf perturbation: 0.94879, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 383.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.4 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.6 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 426.4 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.5 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 342.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 329.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.2 s)
max Linf perturbation: 0.94926, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 462.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.3 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.9 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 330.4 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 383.1 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.1 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.8 s)
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.4 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 461.7 s)
max Linf perturbation: 0.94872, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.6 s)
max Linf perturbation: 0.94963, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94862, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.4 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.1 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.8 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.3 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 293.6 s)
max Linf perturbation: 0.94955, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.4 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.1 s)
max Linf perturbation: 0.94956, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.4 s)
max Linf perturbation: 0.94929, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.3 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 328.5 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.9 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 364.4 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 401.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 202.4 s)
max Linf perturbation: 0.94876, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 342.6 s)
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94958, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 289.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 403.7 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.9 s)
max Linf perturbation: 0.94910, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 313.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 427.1 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 294.9 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.7 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.4 s)
max Linf perturbation: 0.94837, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 290.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 404.2 s)
max Linf perturbation: 0.94772, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.94852, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 240.0 s)
max Linf perturbation: 0.94863, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 383.7 s)
max Linf perturbation: 0.94944, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 383.7 s)
max Linf perturbation: 0.94969, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 250.2 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 400.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 345.1 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 242.0 s)
max Linf perturbation: 0.94721, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 250.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 367.4 s)
max Linf perturbation: 0.94955, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 276.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.0 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 381.1 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.0 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 311.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 405.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.3 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 293.4 s)
max Linf perturbation: 0.94801, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.6 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 328.4 s)
max Linf perturbation: 0.94825, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.6 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94962, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 345.1 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.4 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 381.7 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.8 s)
max Linf perturbation: 0.94956, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 273.8 s)
max Linf perturbation: 0.94946, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 362.9 s)
max Linf perturbation: 0.94898, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 340.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 329.3 s)
max Linf perturbation: 0.94863, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 362.9 s)
max Linf perturbation: 0.94875, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 329.0 s)
max Linf perturbation: 0.94906, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.2 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 404.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 403.7 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 293.9 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 312.1 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 342.9 s)
max Linf perturbation: 0.94977, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 342.8 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94931, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.9 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 312.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 403.6 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 273.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94962, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.9 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.9 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 342.9 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 293.2 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.7 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.9 s)
max Linf perturbation: 0.94936, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 403.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 179.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 292.9 s)
max Linf perturbation: 0.94677, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.6 s)
max Linf perturbation: 0.94965, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.8 s)
max Linf perturbation: 0.94951, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 401.5 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 348.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 383.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 345.3 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 145.9 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 345.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.4 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 330.9 s)
max Linf perturbation: 0.94921, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 309.5 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.3 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 462.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 10.00%
apgd-ce - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 90.8 s)
max Linf perturbation: 0.94829, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 425.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 5 out of 9 successfully perturbed
robust accuracy after APGD-CE: 40.00% (total time 348.5 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 532.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 313.7 s)
max Linf perturbation: 0.94915, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 382.9 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94946, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.3 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94949, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.9 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 216.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 331.4 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 345.4 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 241.0 s)
max Linf perturbation: 0.94956, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 289.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 10.00%
apgd-ce - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 92.3 s)
max Linf perturbation: 0.94845, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 384.7 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 289.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 403.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 294.1 s)
max Linf perturbation: 0.94942, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.6 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 249.2 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 399.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.6 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.94968, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 110.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 402.3 s)
max Linf perturbation: 0.94971, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.94958, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 341.6 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 348.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 443.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 344.6 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.6 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 462.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 387.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 331.2 s)
max Linf perturbation: 0.94871, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 289.0 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 404.2 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 406.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 310.6 s)
max Linf perturbation: 0.94882, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.9 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.3 s)
max Linf perturbation: 0.94943, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.1 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.8 s)
max Linf perturbation: 0.94968, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 145.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 239.0 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 288.5 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 438.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 145.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 239.2 s)
max Linf perturbation: 0.94923, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 248.7 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 362.1 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 308.3 s)
max Linf perturbation: 0.94855, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 348.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 441.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 66.67%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 11.11% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 11.11% (total time 341.6 s)
max Linf perturbation: 0.94877, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 11.11%
robust accuracy after APGD-CE: 10.00% (total time 216.0 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 315.7 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 387.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 216.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 313.7 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 209.1 s)
max Linf perturbation: 0.94927, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.9 s)
max Linf perturbation: 0.94971, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 387.7 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 277.0 s)
max Linf perturbation: 0.94966, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 312.3 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 346.2 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 290.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 384.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 2 out of 5 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 215.9 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 366.4 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.0 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 344.2 s)
max Linf perturbation: 0.94597, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 240.1 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.8 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.9 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 250.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 250.1 s)
max Linf perturbation: 0.94921, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 44.44%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94695, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 307.7 s)
max Linf perturbation: 0.94968, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.7 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.5 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 248.9 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 398.7 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.8 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 401.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.0 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.3 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 461.1 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.5 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 272.7 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 307.3 s)
max Linf perturbation: 0.94932, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 424.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 33.33%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.0 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
robust accuracy after APGD-CE: 0.00% (total time 312.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.0 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.9 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 461.9 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94958, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 180.3 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 293.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 145.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 238.1 s)
max Linf perturbation: 0.94544, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.7 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 384.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 248.9 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 384.4 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 240.3 s)
max Linf perturbation: 0.92417, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.2 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 403.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.2 s)
max Linf perturbation: 0.94920, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.6 s)
max Linf perturbation: 0.94955, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.3 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.4 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.3 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.0 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 44.44%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
robust accuracy after APGD-CE: 0.00% (total time 215.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 342.2 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 272.4 s)
max Linf perturbation: 0.94940, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.6 s)
max Linf perturbation: 0.94903, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 341.1 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 288.7 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 438.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 401.9 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 340.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 248.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 340.5 s)
max Linf perturbation: 0.94992, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 306.9 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.0 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 362.6 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 380.0 s)
max Linf perturbation: 0.94972, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 271.8 s)
max Linf perturbation: 0.94888, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 288.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 402.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.4 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.9 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94915, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 363.9 s)
max Linf perturbation: 0.94899, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.7 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 215.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 330.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.3 s)
max Linf perturbation: 0.94917, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.5 s)
max Linf perturbation: 0.94928, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 382.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 180.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 274.8 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 146.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.5 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.3 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 289.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 382.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.7 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.5 s)
max Linf perturbation: 0.94933, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.4 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 465.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 289.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 403.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 311.7 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 461.7 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94994, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.5 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 425.5 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 311.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 426.1 s)
max Linf perturbation: 0.94963, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 3 out of 6 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 215.5 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 365.7 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 204.5 s)
max Linf perturbation: 0.94810, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 405.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 288.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 383.5 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.4 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.7 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 343.5 s)
max Linf perturbation: 0.94952, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 343.4 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 348.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 462.4 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 215.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 310.9 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 311.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 311.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 406.2 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 383.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.3 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 363.6 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.3 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 249.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 345.1 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 288.6 s)
robust accuracy after APGD-DLR: 20.00% (total time 363.2 s)
max Linf perturbation: 0.94857, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 249.0 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 55.56%
apgd-ce - 1/1 - 3 out of 5 successfully perturbed
robust accuracy after APGD-CE: 22.22% (total time 215.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 22.22% (total time 329.4 s)
max Linf perturbation: 0.94812, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 22.22%
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 382.9 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 44.44%
apgd-ce - 1/1 - 4 out of 4 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 180.5 s)
max Linf perturbation: 0.94916, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
robust accuracy after APGD-CE: 10.00% (total time 288.7 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 380.3 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 215.1 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 30.00%
apgd-ce - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 146.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 237.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 249.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 362.3 s)
max Linf perturbation: 0.94922, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 20.00%
apgd-ce - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 110.2 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.8 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 66.67%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 22.22% (total time 248.8 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 362.2 s)
max Linf perturbation: 0.94967, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
