Alternatives and similar repositories for certifiedpatchdefense:

Users that are interested in certifiedpatchdefense are comparing it to the libraries listed below

• thu-ml / Prior-Guided-RGF
  ☆40Updated last year
• qizhangli / linbp-attack
  Code for our NeurIPS 2020 paper Backpropagating Linearly Improves Transferability of Adversarial Examples.
  ☆42Updated 2 years ago
• ermongroup / ODS
  Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"
  ☆53Updated 4 years ago
• Jianbo-Lab / HSJA
  ☆83Updated 4 years ago
• pralab / Fast-Minimum-Norm-FMN-Attack
  Foolbox implementation for NeurIPS 2021 Paper: "Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints".
  ☆25Updated 2 years ago
• wielandbrendel / adaptive_attacks_paper
  Code for "On Adaptive Attacks to Adversarial Example Defenses"
  ☆86Updated 4 years ago
• cmhcbb / attackbox
  ☆58Updated 3 years ago
• cassidylaidlaw / perceptual-advex
  Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".
  ☆55Updated 3 years ago
• haizhongzheng / ATTA
  ATTA (Efficient Adversarial Training with Transferable Adversarial Examples)
  ☆35Updated 4 years ago
• MadryLab / blackbox-bandits
  Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"
  ☆63Updated 5 years ago
• fra31 / sparse-imperceivable-attacks
  Sparse and Imperceivable Adversarial Attacks (accepted to ICCV 2019).
  ☆40Updated 4 years ago
• point0bar1 / ebm-defense
  PyTorch implementation of BPDA+EOT attack to evaluate adversarial defense with an EBM
  ☆24Updated 4 years ago
• cassidylaidlaw / ReColorAdv
  ReColorAdv and other attacks from the NeurIPS 2019 paper "Functional Adversarial Attacks"
  ☆37Updated 2 years ago
• TransEmbedBA / TREMBA
  Code for Black-Box Adversarial Attack with Transferable Model-based Embedding
  ☆57Updated 4 years ago
• bymavis / CAS_ICLR2021
  ☆57Updated 2 years ago
• watml / fast-wasserstein-adversarial
  Implementation of Wasserstein adversarial attacks.
  ☆23Updated 4 years ago
• kenny-co / sgd-uap-torch
  Universal Adversarial Perturbations (UAPs) for PyTorch
  ☆47Updated 3 years ago
• eth-sri / adaptive-auto-attack
  ☆23Updated 3 years ago
• Haichao-Zhang / FeatureScatter
  Feature Scattering Adversarial Training (NeurIPS19)
  ☆72Updated 9 months ago
• vtddggg / CAA
  The implementation of our paper: Composite Adversarial Attacks (AAAI2021)
  ☆30Updated 3 years ago
• dongyp13 / Adversarial-Distributional-Training
  Adversarial Distributional Training (NeurIPS 2020)
  ☆62Updated 3 years ago
• val-iisc / Hard-Label-Model-Stealing
  ☆29Updated 2 years ago
• Cold-Winter / Nattack
  ☆47Updated 4 years ago
• IBM / Autozoom-Attack
  Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking B…
  ☆57Updated 5 years ago
• zhuchen03 / ConvexPolytopePosioning
  ConvexPolytopePosioning
  ☆34Updated 5 years ago
• uclaml / RayS
  RayS: A Ray Searching Method for Hard-label Adversarial Attack (KDD2020)
  ☆56Updated 4 years ago
• nesl / adversarial_genattack
  ☆54Updated last year
• AI-secure / QEBA
  Code for CVPR2020 paper QEBA: Query-Efficient Boundary-Based Blackbox Attack
  ☆30Updated 4 years ago
• hsouri / Sleeper-Agent
  ☆65Updated last year
• zjfheart / Geometry-aware-Instance-reweighted-Adversarial-Training
  the paper "Geometry-aware Instance-reweighted Adversarial Training" ICLR 2021 oral
  ☆59Updated 3 years ago