$3.$ In the last section of the notebook, $$to see if we can defend against the whitebox attack to defeat defences" vary the Jpeg compression from $20$ to $90($in increments of $5)$ and the GaussianNoise scale from $0\mathrm{.}05$ to