hello everyone, I started reading about adversarial attacks, and then I passed by this paper:
I understand the work done until figure number 08 where I saw that he used the layer number 27 in order to predict the saliency region !
but I haven’t find the reason why choosing 27th and not another ?
thank you in advance.