Variation in Dissimilarity Variation in Dissimilarity

• is the variance of the NISSIM metric over the adversarial set over different levels of attack eps for a model, this shows the distribution of the attack on the model when different levels of attack are performed
• Ideally, we would want the distribution to be stable for different levels of attack
• $m_h=\frac{1}{eps}\Sigma (NISSI{M}_{eps})$
• $VID=\sqrt{\frac{\Sigma (NISSI{M}_{eps}-m_h{)}^2}{eps}}$