From c704ef76467225aba0a69b3c5d04333b7f3f9526 Mon Sep 17 00:00:00 2001 From: Yuxin Wu Date: Mon, 11 Feb 2019 11:30:07 -0800 Subject: [PATCH] fix typo --- INSTRUCTIONS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/INSTRUCTIONS.md b/INSTRUCTIONS.md index 58568ed..2fe6890 100644 --- a/INSTRUCTIONS.md +++ b/INSTRUCTIONS.md @@ -65,7 +65,7 @@ Note: 1. As mentioned in the paper, the threat model is: - 1. __Targeted attack__, with one target label associated with each image. The target lable is + 1. __Targeted attack__, with one target label associated with each image. The target label is independently generated by uniformly sampling the incorrect labels. 2. Maximum perturbation per pixel is 16.