AminJun / BreakingCertifiableDefenses

Related projects: ⓘ

• Ping-C / certifiedpatchdefense
  Repository for Certified Defenses for Adversarial Patch ICLR-2020
  ☆32Updated 4 years ago
• inspire-group / PatchGuard
  Code for paper "PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking"
  ☆62Updated 2 years ago
• cassidylaidlaw / perceptual-advex
  Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".
  ☆54Updated 2 years ago
• snu-mllab / parsimonious-blackbox-attack
  Official TensorFlow implementation of "Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization" (ICML 2019)
  ☆37Updated 3 years ago
• cleverhans-lab / dataset-inference
  [ICLR'21] Dataset Inference for Ownership Resolution in Machine Learning
  ☆30Updated last year
• ZiangYan / pda.pytorch
  Implementation of our ICLR 2021 paper: Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples.
  ☆11Updated 3 years ago
• sukrutrao / Adversarial-Patch-Training
  Code for the paper: Adversarial Training Against Location-Optimized Adversarial Patches. ECCV-W 2020.
  ☆41Updated 11 months ago
• SSGAalto / prada-protecting-against-dnn-model-stealing-attacks
  Reference implementation of the PRADA model stealing defense. IEEE Euro S&P 2019.
  ☆33Updated 5 years ago
• fra31 / sparse-imperceivable-attacks
  Sparse and Imperceivable Adversarial Attacks (accepted to ICCV 2019).
  ☆40Updated 3 years ago
• wangkua1 / vmi
  Code for "Variational Model Inversion Attacks" Wang et al., NeurIPS2021
  ☆20Updated 2 years ago
• superrrpotato / Defending-Neural-Backdoors-via-Generative-Distribution-Modeling
  The code is for our NeurIPS 2019 paper: https://arxiv.org/abs/1910.04749
  ☆31Updated 4 years ago
• wielandbrendel / adaptive_attacks_paper
  Code for "On Adaptive Attacks to Adversarial Example Defenses"
  ☆84Updated 3 years ago
• zhuchen03 / ConvexPolytopePosioning
  ConvexPolytopePosioning
  ☆33Updated 4 years ago
• locuslab / breaking-poisoned-classifier
  Code for paper "Poisoned classifiers are not only backdoored, they are fundamentally broken"
  ☆24Updated 2 years ago
• MadryLab / blackbox-bandits
  Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"
  ☆61Updated 4 years ago
• TLMichael / Delusive-Adversary
  [NeurIPS 2021] Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training
  ☆31Updated 2 years ago
• haizhongzheng / ATTA
  ATTA (Efficient Adversarial Training with Transferable Adversarial Examples)
  ☆32Updated 4 years ago
• thu-ml / Prior-Guided-RGF
  ☆41Updated last year
• Haichao-Zhang / FeatureScatter
  Feature Scattering Adversarial Training (NeurIPS19)
  ☆71Updated 3 months ago
• pralab / Fast-Minimum-Norm-FMN-Attack
  Foolbox implementation for NeurIPS 2021 Paper: "Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints".
  ☆25Updated 2 years ago
• HanxunH / MDAttack
  [Machine Learning 2023] Imbalanced Gradients: A Subtle Cause of Overestimated Adversarial Robustness
  ☆17Updated 2 months ago
• ermongroup / ODS
  Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"
  ☆52Updated 3 years ago
• Jianbo-Lab / HSJA
  ☆76Updated 3 years ago
• Bai-Li / STN-Code
  Code for Stability Training with Noise (STN)
  ☆21Updated 3 years ago
• AI-secure / Knowledge-Enhanced-Machine-Learning-Pipeline
  Repository for Knowledge Enhanced Machine Learning Pipeline (KEMLP)
  ☆10Updated 3 years ago
• HosseinHosseini / Semantic-Adversarial-Examples
  Code for generating adversarial color-shifted images
  ☆19Updated 4 years ago
• val-iisc / Hard-Label-Model-Stealing
  ☆27Updated 2 years ago
• qizhangli / linbp-attack
  Code for our NeurIPS 2020 paper Backpropagating Linearly Improves Transferability of Adversarial Examples.
  ☆42Updated last year
• eth-sri / adaptive-auto-attack
  ☆23Updated 2 years ago
• adverML / SpectralDef_Framework
  Is RobustBench/AutoAttack a suitable Benchmark for Adversarial Robustness?
  ☆11Updated 2 years ago