can not generate trigger for low frequency attack about backdoorbench HOT 2 CLOSED

The code of this perturbation generation is from the paper we replicate and we did not change that part.
The fooling rate does not influence the training process of backdoor model much. What we observed is that even if the fooling rate is low, the attack process can still be successful. I remember when we run the script it is also low, but we found that the perturbation actually works in the attack process. And you can observe that the perturbation itself looks like adding a filter to images by your eyes. Hopes this information can help you. I suggest you to run the attack with perturbation you get first.

from backdoorbench.

Thanks for your answer. It really solves my confusion. Thanks again for your great work!

from backdoorbench.