Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
attack is especially large. However, the performance of ODENet is not very competitive in comparison with the baseline model. The performance of both models trained on ImgNet10 dropped the most under the attack. One drawback is that the standard deviation is only calculated on three repetitions,