Please refer to these insturctions for dataset preparation and env-setup.sh for environment setup.
Insturctions for reproducing the attacks can be found in attackers/*
Attack efficacy is evaluated on the following models - many thank for their amazing work!