no code implementations • 18 Jan 2024 • Tianyu Zhu, Heming Sun, Xiankui Xiong, Xuanpeng Zhu, Yong Gong, Minge jing, Yibo Fan
Our experiments compare the effects of different dimensions such as attack methods, models, qualities, and targets, concluding that in the worst case, there is a 61. 55% decrease in PSNR or a 19. 15 times increase in bpp under the PGD attack.