jarvico:

But I am not sure which epsilon I need to chose when I need to implement the same attack under L2_norm metric. ( to simulate the same volume of perturbation)


I still couldn’t figure out how to calculate necessary l2 norm perturbation epsilon_1 value which will result in the same volume of perturbation for l’inf norm under epsilon_2 value.
I need to calculate epsilon_1 using epsilon_2 and the image dimensions. Can somebody help me to find out the conversion formula?
Thanks in advance…
Jarvico