Cannot reproduce the accuracy reported in the paper with the code on Texas100

[tianzheng4]

Hi Liwei,

I have run the texas_undefend.py in the adversarial regularization/training_code and got 97.68% training acc and 47.47% testing acc. My own implementation also achieves similar numbers with 20 training epochs. I am wondering how to achieve the numbers reported in the paper (81.0% training acc and 52.3% testing acc)?

Many thanks!