Square Attack remarks

[aliotopal]

In the ART library, the default epsilon value for the Square Attack under the L_infty norm is 0.3. However, we noticed that the original paper recommends using the lower value eps = 0.05 for attacks generating adversarial images from the ImageNet dataset.