18 19th February, Monday

I've got the capacity attack working on the differentially secure model now. Seems as though having tuned all the the models parameters that I can see nothing immediately that would suggest I can stop the attack straight away. The DP seems to be mainly affecting the accuracy of the original image, not the synthetic which is a little strange.

I also found some weird behaviour whereby the accuracy on mal images is 100% all the way up to exactly 304 synthetic images, then 304 to ~400 the accuracy goes down from 100% to 81% then ~400 up to 1500+ synthetic images I seem to be getting exactly 81% for all, which seems a little strange.