Created by: dailydreamer

Add original JSMA paper implementation trick, choosing two pixels when attack instead of one. Attack accuracy has little improve.