Explore impact of network architecture on attack efficacy #2
Description
Vary:
- number of hidden layers
- size of hidden layers
- size of intermediate tensor (sent between model parts)
- convolution v fully connected layers
From earlier work, should be that more layers -> attack power decreases; FC layers reduce attack power more than conv layers; smaller intermediate tensor -> attack power decreases