Test accuracy
Adversarial robustness: PGD attack
Adversarial robustness: Square attack
Adversarial robustness: Auto attack