Projected Gradient Descent
attack-type : white box
goals : non targeted
time : inference time
PGD is an iterative variant of FGSM, where the attacker performs multiple iterations of FGSM with a smaller step size. This attack is more powerful and robust compared to FGSM.