Alternatives and similar repositories for ZOO-Attack

Users that are interested in ZOO-Attack are comparing it to the libraries listed below

• huanzhang12 / ZOO-Attack
  ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks
  ☆169Updated 4 years ago
• IBM / Autozoom-Attack
  Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking B…
  ☆59Updated 5 years ago
• nesl / adversarial_genattack
  ☆57Updated 2 years ago
• cg563 / simple-blackbox-attack
  Code for ICML 2019 paper "Simple Black-box Adversarial Attacks"
  ☆199Updated 2 years ago
• Cold-Winter / Nattack
  ☆48Updated 4 years ago
• MadryLab / blackbox-bandits
  Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"
  ☆64Updated 5 years ago
• Jianbo-Lab / HSJA
  ☆87Updated 4 years ago
• labsix / limited-blackbox-attacks
  Code for "Black-box Adversarial Attacks with Limited Queries and Information" (http://arxiv.org/abs/1804.08598)
  ☆180Updated 4 years ago
• sunblaze-ucb / decision-boundaries
  code we used in Decision Boundary Analysis of Adversarial Examples https://openreview.net/forum?id=BkpiPMbA-
  ☆29Updated 7 years ago
• huanzhang12 / CLEVER
  CLEVER (Cross-Lipschitz Extreme Value for nEtwork Robustness) is a robustness metric for deep neural networks
  ☆63Updated 4 years ago
• snu-mllab / parsimonious-blackbox-attack
  Official TensorFlow implementation of "Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization" (ICML 2019)
  ☆40Updated 4 years ago
• thu-ml / Prior-Guided-RGF
  ☆41Updated 2 years ago
• xingjunm / lid_adversarial_subspace_detection
  Code for paper "Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality".
  ☆125Updated 5 years ago
• fra31 / fab-attack
  Code for FAB-attack
  ☆34Updated 5 years ago
• Haichao-Zhang / FeatureScatter
  Feature Scattering Adversarial Training (NeurIPS19)
  ☆74Updated last year
• thong3le / blackbox-attack
  Blackbox attacks for deep neural network models
  ☆70Updated 7 years ago
• tianzheng4 / Distributionally-Adversarial-Attack
  AAAI 2019 oral presentation
  ☆53Updated 5 months ago
• ermongroup / ODS
  Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"
  ☆53Updated 5 years ago
• wronnyhuang / metapoison
  Craft poisoned data using MetaPoison
  ☆53Updated 4 years ago
• greentfrapp / boundary-attack
  Implementation of the Boundary Attack algorithm as described in Brendel, Wieland, Jonas Rauber, and Matthias Bethge. "Decision-Based Adve…
  ☆99Updated 4 years ago
• kkew3 / pytorch-cw2
  A rich-documented PyTorch implementation of Carlini-Wagner's L2 attack.
  ☆60Updated 7 years ago
• AI-secure / QEBA
  Code for CVPR2020 paper QEBA: Query-Efficient Boundary-Based Blackbox Attack
  ☆33Updated 4 years ago
• locuslab / robust_overfitting
  ☆160Updated 4 years ago
• TransEmbedBA / TREMBA
  Code for Black-Box Adversarial Attack with Transferable Model-based Embedding
  ☆58Updated 5 years ago
• cassidylaidlaw / perceptual-advex
  Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".
  ☆56Updated 3 years ago
• jinyuan-jia / Certify_Topk
  ☆11Updated 5 years ago
• ftramer / MultiRobustness
  Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019
  ☆47Updated 2 years ago
• dongyp13 / Adversarial-Distributional-Training
  Adversarial Distributional Training (NeurIPS 2020)
  ☆63Updated 4 years ago
• Ping-C / certifiedpatchdefense
  Repository for Certified Defenses for Adversarial Patch ICLR-2020
  ☆34Updated 5 years ago
• zhuchen03 / ConvexPolytopePosioning
  ConvexPolytopePosioning
  ☆37Updated 5 years ago