IBM / ZOO-Attack
Codes for reproducing the black-box adversarial attacks in “ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models,” ACM CCS Workshop on AI-Security, 2017
☆57Updated 5 years ago
Alternatives and similar repositories for ZOO-Attack:
Users that are interested in ZOO-Attack are comparing it to the libraries listed below
- ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks☆168Updated 3 years ago
- ☆40Updated last year
- ☆54Updated last year
- Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking B…☆57Updated 5 years ago
- Implementation of the Boundary Attack algorithm as described in Brendel, Wieland, Jonas Rauber, and Matthias Bethge. "Decision-Based Adve…☆93Updated 4 years ago
- ☆83Updated 4 years ago
- ☆47Updated 4 years ago
- Analysis of Adversarial Logit Pairing☆60Updated 6 years ago
- Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019☆47Updated 2 years ago
- Blackbox attacks for deep neural network models☆70Updated 6 years ago
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆32Updated 4 years ago
- AAAI 2019 oral presentation☆50Updated 7 months ago
- ConvexPolytopePosioning☆35Updated 5 years ago
- Code for Black-Box Adversarial Attack with Transferable Model-based Embedding☆57Updated 4 years ago
- code we used in Decision Boundary Analysis of Adversarial Examples https://openreview.net/forum?id=BkpiPMbA-☆27Updated 6 years ago
- Official TensorFlow implementation of "Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization" (ICML 2019)☆39Updated 4 years ago
- Adversarial Distributional Training (NeurIPS 2020)☆62Updated 4 years ago
- EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples☆40Updated 6 years ago
- Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"☆53Updated 4 years ago
- Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"☆63Updated 5 years ago
- Code for the unrestricted adversarial examples paper (NeurIPS 2018)☆64Updated 5 years ago
- Code for FAB-attack☆32Updated 4 years ago
- Implementation of the Biased Boundary Attack for ImageNet☆23Updated 5 years ago
- Feature Scattering Adversarial Training (NeurIPS19)☆72Updated 9 months ago
- Code for Stability Training with Noise (STN)☆21Updated 4 years ago
- Attacking a dog vs fish classification that uses transfer learning inceptionV3☆70Updated 6 years ago
- Code for "On Adaptive Attacks to Adversarial Example Defenses"☆86Updated 4 years ago
- A rich-documented PyTorch implementation of Carlini-Wagner's L2 attack.☆60Updated 6 years ago
- Code for paper "Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality".☆123Updated 4 years ago
- ☆11Updated 5 years ago