equation

index.html

@@ -422,7 +422,7 @@
         <p>
           Attackers can design adaptive attacks to try to bypass BEYOND when the attacker knows all the parameters of the model 
           and the detection strategy. For an SSL model with a feature extractor <equation-inline>f</equation-inline>, a projector $h$, and a classification head $g$, 
-          the classification branch can be formulated as $\mathbb{C} = f\circ g$ and the representation branch as $\mathbb{R} = f\circ h$. 
+          the classification branch can be formulated as <equation-inline>\mathbb{C} = f\circ g</equation-inline> and the representation branch as $\mathbb{R} = f\circ h$. 
           To attack effectively, the adversary must deceive the target model while guaranteeing the label consistency and representation similarity of the SSL model. 
       </div>
     </div>