using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.2 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 183.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 202.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 209.0 s)
max Linf perturbation: 0.94895, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.94910, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 195.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 184.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.2 s)
max Linf perturbation: 0.94898, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.6 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.94788, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.3 s)
max Linf perturbation: 0.94734, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.94653, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.94876, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.2 s)
max Linf perturbation: 0.94896, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 184.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 205.8 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 111.3 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 196.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.2 s)
max Linf perturbation: 0.94933, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.6 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.1 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 99.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 191.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.5 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 179.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.94926, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 191.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.3 s)
max Linf perturbation: 0.94979, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.94891, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 198.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.1 s)
max Linf perturbation: 0.94904, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 178.7 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 113.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 195.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 99.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 196.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 184.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 101.0 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.94933, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.1 s)
max Linf perturbation: 0.94942, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 101.0 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 188.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.1 s)
max Linf perturbation: 0.94931, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 200.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.9 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 87.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 169.3 s)
max Linf perturbation: 0.94510, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.94899, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 209.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.4 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 185.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.94823, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.9 s)
max Linf perturbation: 0.94843, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 118.9 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.6 s)
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.5 s)
max Linf perturbation: 0.94987, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.7 s)
max Linf perturbation: 0.94839, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 184.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 178.8 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 184.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.4 s)
max Linf perturbation: 0.94978, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.0 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 183.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 183.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 99.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 185.5 s)
max Linf perturbation: 0.94973, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 5 out of 9 successfully perturbed
robust accuracy after APGD-CE: 40.00% (total time 111.2 s)
apgd-dlr - 1/1 - 2 out of 4 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 197.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 197.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.9 s)
max Linf perturbation: 0.94888, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.94910, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.0 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.0 s)
max Linf perturbation: 0.94467, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.3 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 185.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 86.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.5 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.94914, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 198.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.2 s)
max Linf perturbation: 0.94794, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.1 s)
max Linf perturbation: 0.94918, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 183.0 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 196.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 88.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 202.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 203.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 202.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 40.00%
apgd-ce - 1/1 - 3 out of 4 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 84.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 166.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.0 s)
max Linf perturbation: 0.94830, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.0 s)
max Linf perturbation: 0.94917, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 187.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 185.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.2 s)
max Linf perturbation: 0.94981, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.9 s)
max Linf perturbation: 0.94995, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.94964, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 85.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 198.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.3 s)
max Linf perturbation: 0.94904, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.9 s)
max Linf perturbation: 0.94831, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.94942, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 196.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 198.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.0 s)
max Linf perturbation: 0.94887, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.0 s)
max Linf perturbation: 0.94989, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 191.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.94983, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.1 s)
max Linf perturbation: 0.94955, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.9 s)
max Linf perturbation: 0.94835, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.5 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 208.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 184.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 204.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 203.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 4 out of 6 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 87.9 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 174.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 205.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 186.7 s)
max Linf perturbation: 0.94948, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 87.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 170.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.94980, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 88.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 197.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.94993, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.94930, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 99.8 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 186.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.8 s)
max Linf perturbation: 0.94930, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.1 s)
max Linf perturbation: 0.94668, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 207.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.94811, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.2 s)
max Linf perturbation: 0.94942, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.5 s)
max Linf perturbation: 0.94953, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.9 s)
max Linf perturbation: 0.94840, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.8 s)
robust accuracy after APGD-DLR: 20.00% (total time 199.3 s)
max Linf perturbation: 0.94575, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 185.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 183.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 88.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 170.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 119.7 s)
apgd-dlr - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 206.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.1 s)
max Linf perturbation: 0.94943, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 184.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 101.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 188.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 196.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 4 out of 5 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 85.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 167.6 s)
max Linf perturbation: 0.94899, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.9 s)
max Linf perturbation: 0.94881, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
robust accuracy after APGD-DLR: 0.00% (total time 174.4 s)
max Linf perturbation: 0.93871, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.2 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 187.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 197.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 186.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 205.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.3 s)
max Linf perturbation: 0.94924, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.3 s)
max Linf perturbation: 0.94394, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.3 s)
max Linf perturbation: 0.94955, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 98.3 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 185.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 205.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 4 out of 8 successfully perturbed
robust accuracy after APGD-CE: 40.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 4 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 187.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 86.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.94952, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.3 s)
max Linf perturbation: 0.94641, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 87.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 185.9 s)
max Linf perturbation: 0.94721, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.2 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 185.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 196.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 196.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.94961, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.7 s)
max Linf perturbation: 0.94884, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.8 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 4 out of 7 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 98.2 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 184.2 s)
max Linf perturbation: 0.94950, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
robust accuracy after APGD-CE: 0.00% (total time 101.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.6 s)
max Linf perturbation: 0.94915, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.8 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 100.9 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 85.3 s)
max Linf perturbation: 0.94615, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.3 s)
max Linf perturbation: 0.94960, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 207.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 101.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 188.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 188.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 207.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 198.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 86.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 169.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.1 s)
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 185.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.0 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 205.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 186.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.94866, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 178.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 191.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 191.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 87.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 167.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 204.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 178.6 s)
max Linf perturbation: 0.94675, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 169.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 86.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 169.1 s)
max Linf perturbation: 0.94779, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.0 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 86.9 s)
max Linf perturbation: 0.94828, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.6 s)
max Linf perturbation: 0.94991, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.3 s)
max Linf perturbation: 0.94936, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 98.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 5 out of 9 successfully perturbed
robust accuracy after APGD-CE: 40.00% (total time 111.3 s)
apgd-dlr - 1/1 - 1 out of 4 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 197.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.4 s)
max Linf perturbation: 0.94919, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 205.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.0 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 186.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.9 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.1 s)
max Linf perturbation: 0.94884, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.94977, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 186.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.94902, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 179.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.94936, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 5 out of 9 successfully perturbed
robust accuracy after APGD-CE: 40.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 4 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 197.3 s)
max Linf perturbation: 0.94797, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 197.4 s)
max Linf perturbation: 0.94894, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 186.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.7 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.4 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 197.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 197.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.94985, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.7 s)
max Linf perturbation: 0.94941, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.94590, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.94959, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.94905, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 206.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.3 s)
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.3 s)
max Linf perturbation: 0.94988, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.9 s)
max Linf perturbation: 0.94884, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.93393, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 88.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 170.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.94996, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 119.7 s)
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.9 s)
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.94970, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.94748, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.4 s)
max Linf perturbation: 0.94741, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 87.2 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 169.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 204.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 100.3 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 190.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 201.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.5 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 2 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 186.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 202.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 188.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.2 s)
max Linf perturbation: 0.94718, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 186.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
robust accuracy after APGD-DLR: 10.00% (total time 204.7 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.94954, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 191.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 5 out of 8 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 30.00% (total time 185.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 30.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 178.7 s)
max Linf perturbation: 0.93397, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 191.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.94945, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 204.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.94974, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 196.8 s)
max Linf perturbation: 0.94998, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 192.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.94772, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 11.11% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 11.11% (total time 191.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 11.11%
apgd-dlr - 1/1 - 1 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 205.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.0 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 180.6 s)
max Linf perturbation: 0.94894, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 111.5 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.1 s)
max Linf perturbation: 0.94117, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 88.89%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
robust accuracy after APGD-DLR: 10.00% (total time 192.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.4 s)
max Linf perturbation: 0.94984, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 87.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 6 out of 9 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 111.5 s)
apgd-dlr - 1/1 - 3 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 196.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.94672, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.8 s)
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.9 s)
max Linf perturbation: 0.94925, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 197.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.94999, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.94697, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.5 s)
max Linf perturbation: 0.94821, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 88.89%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 11.11% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 180.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
max Linf perturbation: 0.94986, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.94952, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 187.2 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.4 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 6 out of 8 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 187.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.4 s)
max Linf perturbation: 0.94997, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.8 s)
max Linf perturbation: 0.94915, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.1 s)
max Linf perturbation: 0.94896, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 6 out of 6 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 86.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.0 s)
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.3 s)
max Linf perturbation: 0.94975, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 181.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 192.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 197.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 199.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 98.1 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 179.5 s)
max Linf perturbation: 0.94990, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 118.7 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.2 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.3 s)
max Linf perturbation: 0.94946, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 200.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.2 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 198.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 182.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 200.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 77.78%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.1 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 11.11% (total time 111.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.7 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 201.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.3 s)
max Linf perturbation: 0.94873, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.8 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 207.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.8 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.3 s)
max Linf perturbation: 0.94806, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 50.00%
apgd-ce - 1/1 - 5 out of 5 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 85.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.5 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 194.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.1 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.1 s)
max Linf perturbation: 0.94924, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.0 s)
Warning: there are 1 points with zero gradient! This might lead to unreliable evaluation with gradient-based attacks. See flags_doc.md for details.
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 183.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.4 s)
max Linf perturbation: 0.94933, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 99.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 112.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 196.2 s)
max Linf perturbation: 0.94858, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 101.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 183.3 s)
max Linf perturbation: 0.94982, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 101.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 5 out of 7 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 98.4 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 188.5 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 204.2 s)
max Linf perturbation: 0.94976, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 60.00%
apgd-ce - 1/1 - 5 out of 6 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 89.5 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 171.5 s)
max Linf perturbation: 0.94865, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.2 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.9 s)
max Linf perturbation: 0.94928, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 100.3 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 182.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 0.00% (total time 193.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 7 out of 10 successfully perturbed
robust accuracy after APGD-CE: 30.00% (total time 119.0 s)
apgd-dlr - 1/1 - 2 out of 3 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 205.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 118.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 193.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.5 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 198.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 111.6 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 10 out of 10 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 119.0 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 8 out of 10 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 119.0 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 206.9 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 111.6 s)
apgd-dlr - 1/1 - 1 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 199.5 s)
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 7 out of 9 successfully perturbed
robust accuracy after APGD-CE: 20.00% (total time 112.4 s)
apgd-dlr - 1/1 - 0 out of 2 successfully perturbed
robust accuracy after APGD-DLR: 20.00% (total time 199.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 20.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 70.00%
apgd-ce - 1/1 - 6 out of 7 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 99.3 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 181.0 s)
max Linf perturbation: 0.94756, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 9 out of 9 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 112.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 88.89%
apgd-ce - 1/1 - 7 out of 8 successfully perturbed
robust accuracy after APGD-CE: 11.11% (total time 101.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 11.11% (total time 182.7 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 11.11%
max Linf perturbation: 0.94917, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 118.9 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 100.00%
apgd-ce - 1/1 - 9 out of 10 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 119.0 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 201.8 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 90.00%
apgd-ce - 1/1 - 8 out of 9 successfully perturbed
robust accuracy after APGD-CE: 10.00% (total time 111.6 s)
apgd-dlr - 1/1 - 0 out of 1 successfully perturbed
robust accuracy after APGD-DLR: 10.00% (total time 194.3 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 10.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 80.00%
apgd-ce - 1/1 - 8 out of 8 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 100.2 s)
max Linf perturbation: 0.94971, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
using rand version including apgd-ce, apgd-dlr.
initial accuracy: 77.78%
apgd-ce - 1/1 - 7 out of 7 successfully perturbed
robust accuracy after APGD-CE: 0.00% (total time 98.4 s)
max Linf perturbation: 0.95000, nan in tensor: 0, max: 1.00000, min: 0.00000
robust accuracy: 0.00%
