IBM / ZOO-AttackLinks
Codes for reproducing the black-box adversarial attacks in “ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models,” ACM CCS Workshop on AI-Security, 2017
☆63Updated 6 years ago
Alternatives and similar repositories for ZOO-Attack
Users that are interested in ZOO-Attack are comparing it to the libraries listed below
Sorting:
- ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks☆169Updated 4 years ago
- ☆86Updated 4 years ago
- Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking B…☆58Updated 5 years ago
- ☆56Updated 2 years ago
- ☆41Updated 2 years ago
- Code for ICML 2019 paper "Simple Black-box Adversarial Attacks"☆198Updated 2 years ago
- Code for "Black-box Adversarial Attacks with Limited Queries and Information" (http://arxiv.org/abs/1804.08598)☆180Updated 4 years ago
- code we used in Decision Boundary Analysis of Adversarial Examples https://openreview.net/forum?id=BkpiPMbA-☆28Updated 6 years ago
- Official TensorFlow implementation of "Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization" (ICML 2019)☆40Updated 4 years ago
- AAAI 2019 oral presentation☆53Updated 4 months ago
- CLEVER (Cross-Lipschitz Extreme Value for nEtwork Robustness) is a robustness metric for deep neural networks☆63Updated 4 years ago
- ☆48Updated 4 years ago
- Code for paper "Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality".☆125Updated 4 years ago
- Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"☆64Updated 5 years ago
- Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"☆53Updated 4 years ago
- Feature Scattering Adversarial Training (NeurIPS19)☆74Updated last year
- Blackbox attacks for deep neural network models☆70Updated 7 years ago
- Code for FAB-attack☆33Updated 5 years ago
- Code for "On Adaptive Attacks to Adversarial Example Defenses"☆86Updated 4 years ago
- Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019☆47Updated 2 years ago
- A rich-documented PyTorch implementation of Carlini-Wagner's L2 attack.☆60Updated 7 years ago
- Code for CVPR2020 paper QEBA: Query-Efficient Boundary-Based Blackbox Attack☆32Updated 4 years ago
- Implementation of the Boundary Attack algorithm as described in Brendel, Wieland, Jonas Rauber, and Matthias Bethge. "Decision-Based Adve…☆99Updated 4 years ago
- ☆157Updated 4 years ago
- Code for the unrestricted adversarial examples paper (NeurIPS 2018)☆65Updated 6 years ago
- Code for "Detecting Adversarial Samples from Artifacts" (Feinman et al., 2017)☆111Updated 7 years ago
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆34Updated 5 years ago
- Code for Stability Training with Noise (STN)☆22Updated 4 years ago
- Code corresponding to the paper "Adversarial Examples are not Easily Detected..."☆88Updated 7 years ago
- Detecting Adversarial Examples in Deep Neural Networks☆67Updated 7 years ago