飞浆框架实现BIM算法

import paddle
from paddle.vision.transforms import ToTensor
from paddle.nn import functional as F
import os
from PIL import Image

def fgsm_attack(image, epsilon, data_grad):
    sign_data_grad = data_grad.sign()
    perturbed_image = image + epsilon*sign_data_grad
    perturbed_image = paddle.clip(perturbed_image, 0, 1)
    return perturbed_image

def bim_attack(model, image, label, epsilon, num_iters):
    for i in range(num_iters):
        image.stop_gradient = False
        output = model(image)
        loss = F.cross_entropy(output, label)
        loss.backward()
        data_grad = image.grad
        perturbed_image = fgsm_attack(image, epsilon, data_grad)
        image = perturbed_image
    return perturbed_image

def generate_adversarial_examples(model, image_folder_path, epsilon=0.1, num_iters=10):
    transform = ToTensor()
    images = []
    for filename in os.listdir(image_folder_pat