What is an adversarial perturbation budget?

The perturbation budget epsilon defines the maximum allowed change to inputs. For images with 255 pixel values, epsilon = 8/255 is a common imperceptible budget.

How is L-inf vs L2 norm used?

L-inf constrains the worst-case pixel change; L2 constrains total change energy. FGSM uses L-inf; CW and DeepFool attacks optimize L2.

Adversarial Attack Perturbation Budget

Calculate the maximum L-infinity or L2 perturbation budget for adversarial examples that remain imperceptible given pixel depth and image size.

Networking

Algorithms

Binary & Number

Systems

Dev Metrics

IP Subnet Calculator

IP Address

CIDR Prefix

Network

192.168.1.0

Broadcast

192.168.1.255

Subnet Mask

255.255.255.0

First Host

192.168.1.1

Last Host

192.168.1.254

Usable Hosts

254

Binary breakdown:

IP: 11000000.10101000.00000001.00000000

Mask: 11111111.11111111.11111111.00000000

Net: 11000000.10101000.00000001.00000000

How to Use

Enter the values for the patient or scenario you are assessing. Calculate the maximum L-infinity or L2 perturbation budget for adversarial examples that remain imperceptible given pixel depth and image size. Use the adversarial budget result to inform your clinical assessment.

Related Calculators

ML Bias Score

Cybersecurity & Machine Learning