pgd attack usage

[Jue Guo]

How do I apply a pgd attack if the image is normalized [0,1]

Let's say, a 20 -step PGD $\ell_{\infty}$ attack with attack with $\epsilon=8$.

Do I do?

attack = ProjectedGradientDescent(
    estimator=classifier,
    eps=8/255, 
    eps_step=2/255,  
    max_iter=20,  
    num_random_init=1 
)