I am trying to implement https://arxiv.org/pdf/1511.07528.pdf 9 . That is Jacobian based saliency map attack for generation of adversarial examples. Is there any reference implementation. If not can somone tell how to compute derivative of logits wrt to inputs.Thanks in advance