Table 3. The mAP of three basic hyper-parameter combinations in I-FGSM and PGD.

Method	Plan	Para. setting			mAP ↓
		$\mathrm{\alpha }$	$\mathrm{\beta }$	$\mathrm{\gamma }$
I-FGSM	A	1.0	1.0	5.0	2.36%
	B	3.0	1.0	3.0	3.17%
	C	5.0	1.0	5.0	3.08%
PGD	A	1.0	1.0	5.0	4.55%
	B	3.0	1.0	3.0	4.18%
	C	5.0	1.0	5.0	4.53%