Some question about the mask about adversarial-attack-on-person-reid-with-deep-mis-ranking HOT 3 CLOSED

No. If directly running the code, what you have performed is the full-size attack (as shown in your figure), which corresponds to our main experiments (Table.1) in our paper. If you want to control the number of attack pixels, please modify the hyper-parameter 'temperature' (the default setting is -1, which means attacking all the pixels on the image). You can set whatever number you want as long as it doesn't exceed the limit. Also, to get better performance, I recommend smoothly decrease the temperature.

from adversarial-attack-on-person-reid-with-deep-mis-ranking.

I can not find the temperature value in your paper? Could you tell me the value of temperature you set in your paper? Or just tell me the suitable value.

from adversarial-attack-on-person-reid-with-deep-mis-ranking.

We use the symbol tau (Eq.2 in the paper) to represent temperature. And I will modify the helper of temperature to avoid the confusion.

If you only want to verify the results in the paper, you just follow the default hyper-parameters and ignore my above suggestion. So you don't necessarily worry about the value of temperature. The temperature is not an adaptive parameter and only relevant to the number of adversarial pixels. For example, you'll set the temperature as 8208 when you want to attack a quarter of the pixels in a given 288x144 image.

from adversarial-attack-on-person-reid-with-deep-mis-ranking.