n class="p">):</span>
    <span class="sd">&quot;&quot;&quot;</span>
<span class="sd">    Implements Adversial Bim Strategy which is motivated by the fact that often the distance</span>
<span class="sd">    computation from decision boundary is difficult and intractable for margin based methods. This </span>
<span class="sd">    technique avoids estimating distance by using BIM(Basic Iterative Method)</span>
<span class="sd">    :footcite:`tramer2017ensemble` to estimate how much adversarial perturbati