Thank you for your contribution and sharing. When I reproduced the code, I found that the patch could not be optimized properly. Although all the loss values were output normally, the gradient was always 0, and the gradient of the attacked network could not be accessed. How can I solve this problem?
Thank you for your contribution and sharing. When I reproduced the code, I found that the patch could not be optimized properly. Although all the loss values were output normally, the gradient was always 0, and the gradient of the attacked network could not be accessed. How can I solve this problem?