{"baseline":{"top1":{"rank":1,"class_id":258,"label":"Samoyed","confidence":0.830899518446138},"top5":[{"rank":1,"class_id":258,"label":"Samoyed","confidence":0.830899518446138},{"rank":2,"class_id":259,"label":"Pomeranian","confidence":0.05327296727180645},{"rank":3,"class_id":257,"label":"Great Pyrenees","confidence":0.02861813439108317},{"rank":4,"class_id":222,"label":"kuvasz","confidence":0.019351887813832028},{"rank":5,"class_id":270,"label":"white wolf","confidence":0.010485098364246694}]},"starter":"/starter.jpg","challenges":[{"id":"first-flip","title":"First Flip","points":100,"kind":"top1_flip","description":"Change the top-1 ImageNet label while staying close to the starter image.","max_delta":42,"max_mse":160,"max_changed_ratio":null,"jpeg_quality":null,"require_original_out_top5":false,"flag":null},{"id":"jpeg-survivor","title":"JPEG Survivor","points":175,"kind":"top1_flip","description":"The label must still flip after the server re-encodes your image as JPEG quality 65.","max_delta":58,"max_mse":260,"max_changed_ratio":null,"jpeg_quality":65,"require_original_out_top5":false,"flag":null},{"id":"top5-ghost","title":"Top-5 Ghost","points":250,"kind":"top5_remove","description":"Push the original class out of the model's top-5 predictions.","max_delta":80,"max_mse":520,"max_changed_ratio":null,"jpeg_quality":null,"require_original_out_top5":true,"flag":null},{"id":"bad-sticker","title":"Bad Sticker","points":225,"kind":"top1_flip","description":"Patch-style attack: change at most 12% of pixels and flip the top-1 label.","max_delta":null,"max_mse":null,"max_changed_ratio":0.12,"jpeg_quality":null,"require_original_out_top5":false,"flag":null}]}