Alternatives and similar repositories for BreakingCertifiableDefenses

Users that are interested in BreakingCertifiableDefenses are comparing it to the libraries listed below

• snu-mllab / parsimonious-blackbox-attack
  Official TensorFlow implementation of "Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization" (ICML 2019)
  ☆40Updated 4 years ago
• Jianbo-Lab / HSJA
  ☆86Updated 4 years ago
• kenny-co / sgd-uap-torch
  Universal Adversarial Perturbations (UAPs) for PyTorch
  ☆49Updated 4 years ago
• AI-secure / QEBA
  Code for CVPR2020 paper QEBA: Query-Efficient Boundary-Based Blackbox Attack
  ☆32Updated 4 years ago
• cassidylaidlaw / perceptual-advex
  Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".
  ☆56Updated 3 years ago
• machanic / SimulatorAttack
  The official implementation of CVPR 2021 paper "Simulating Unknown Target Models for Query-Efficient Black-box Attacks"
  ☆59Updated 4 years ago
• alevine0 / patchSmoothing
  Code for the paper "(De)Randomized Smoothing for Certifiable Defense against Patch Attacks" by Alexander Levine and Soheil Feizi.
  ☆17Updated 3 years ago
• thu-ml / Prior-Guided-RGF
  ☆41Updated 2 years ago
• inspire-group / PatchGuard
  Code for paper "PatchGuard: A Provably Robust Defense against Adversarial Patches via Small Receptive Fields and Masking"
  ☆71Updated 3 years ago
• MadryLab / blackbox-bandits
  Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"
  ☆64Updated 5 years ago
• AI-secure / VeriGauge
  A united toolbox for running major robustness verification approaches for DNNs. [S&P 2023]
  ☆90Updated 2 years ago
• Bai-Li / STN-Code
  Code for Stability Training with Noise (STN)
  ☆22Updated 4 years ago
• AI-secure / Knowledge-Enhanced-Machine-Learning-Pipeline
  Repository for Knowledge Enhanced Machine Learning Pipeline (KEMLP)
  ☆10Updated 4 years ago
• cake-lab / datafree-model-extraction
  CVPR 2021 Official repository for the Data-Free Model Extraction paper. https://arxiv.org/abs/2011.14779
  ☆73Updated last year
• eth-sri / adaptive-auto-attack
  ☆23Updated 3 years ago
• jiaxiaojunQAQ / FGSM-SDI
  Code for Boosting fast adversarial training with learnable adversarial initialization (TIP2022)
  ☆29Updated 2 years ago
• JonasGeiping / poisoning-gradient-matching
  Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching
  ☆110Updated last year
• hsouri / Sleeper-Agent
  ☆67Updated last year
• ermongroup / ODS
  Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"
  ☆53Updated 4 years ago
• Haichao-Zhang / FeatureScatter
  Feature Scattering Adversarial Training (NeurIPS19)
  ☆74Updated last year
• cassidylaidlaw / ReColorAdv
  ReColorAdv and other attacks from the NeurIPS 2019 paper "Functional Adversarial Attacks"
  ☆38Updated 3 years ago
• tribhuvanesh / knockoffnets
  Knockoff Nets: Stealing Functionality of Black-Box Models
  ☆108Updated 2 years ago
• zhuchen03 / ConvexPolytopePosioning
  ConvexPolytopePosioning
  ☆37Updated 5 years ago
• wielandbrendel / adaptive_attacks_paper
  Code for "On Adaptive Attacks to Adversarial Example Defenses"
  ☆87Updated 4 years ago
• qizhangli / linbp-attack
  Code for our NeurIPS 2020 paper Backpropagating Linearly Improves Transferability of Adversarial Examples.
  ☆42Updated 2 years ago
• jhayes14 / UAN
  Universal Adversarial Networks
  ☆33Updated 7 years ago
• UMBCvision / Universal-Litmus-Patterns
  Official Repository for the CVPR 2020 paper "Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs"
  ☆43Updated last year
• YiZeng623 / I-BAU
  Official Implementation of ICLR 2022 paper, ``Adversarial Unlearning of Backdoors via Implicit Hypergradient''
  ☆53Updated 2 years ago
• xherdan76 / A-Unified-Approach-to-Interpreting-and-Boosting-Adversarial-Transferability
  A Unified Approach to Interpreting and Boosting Adversarial Transferability (ICLR2021)
  ☆31Updated 3 years ago
• Cold-Winter / Nattack
  ☆48Updated 4 years ago