hello everyone, I started reading about adversarial attacks, and then I passed by this paper:
  

      arxiv.org
  

  
    

2105.00203.pdf

  17.14 MB

  

  
    
    
  

  


I understand the work done until figure number 08 where I saw that he used the layer number 27 in order to predict the saliency region !
but I haven’t find the reason why choosing 27th and not another ?
thank you in advance.