RuntianZ / macer
MACER: MAximizing CErtified Radius (ICLR 2020)
☆29Updated 5 years ago
Alternatives and similar repositories for macer:
Users that are interested in macer are comparing it to the libraries listed below
- Pytorch - Adversarial Training☆26Updated 6 years ago
- [NeurIPS'20 Oral] DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles☆55Updated 3 years ago
- Adversarial Defense for Ensemble Models (ICML 2019)☆61Updated 4 years ago
- ☆35Updated 4 years ago
- RayS: A Ray Searching Method for Hard-label Adversarial Attack (KDD2020)☆56Updated 4 years ago
- Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".☆55Updated 3 years ago
- Feature Scattering Adversarial Training (NeurIPS19)☆73Updated 10 months ago
- Adversarial Distributional Training (NeurIPS 2020)☆63Updated 4 years ago
- [ICLR 2021] "Robust Overfitting may be mitigated by properly learned smoothening" by Tianlong Chen*, Zhenyu Zhang*, Sijia Liu, Shiyu Chan…☆46Updated 3 years ago
- the paper "Geometry-aware Instance-reweighted Adversarial Training" ICLR 2021 oral☆59Updated 4 years ago
- Semisupervised learning for adversarial robustness https://arxiv.org/pdf/1905.13736.pdf☆141Updated 5 years ago
- [ICML'20] Multi Steepest Descent (MSD) for robustness against the union of multiple perturbation models.☆26Updated 8 months ago
- Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019☆47Updated 2 years ago
- Codebase for "Exploring the Landscape of Spatial Robustness" (ICML'19, https://arxiv.org/abs/1712.02779).☆26Updated 5 years ago
- Adversarially Robust Transfer Learning with LWF loss applied to the deep feature representation (penultimate) layer☆18Updated 5 years ago
- ☆48Updated 4 years ago
- Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks☆38Updated 3 years ago
- On the effectiveness of adversarial training against common corruptions [UAI 2022]☆30Updated 2 years ago
- ☆16Updated 5 years ago
- Code for Stability Training with Noise (STN)☆21Updated 4 years ago
- Code for the paper "MMA Training: Direct Input Space Margin Maximization through Adversarial Training"☆34Updated 5 years ago
- Code for Black-Box Adversarial Attack with Transferable Model-based Embedding☆57Updated 4 years ago
- Understanding and Improving Fast Adversarial Training [NeurIPS 2020]☆96Updated 3 years ago
- ☆87Updated 8 months ago
- Official implementation for Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds (NeurIPS, 2021).☆23Updated 2 years ago
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆32Updated 4 years ago
- [NeurIPS 2021] Fast Certified Robust Training with Short Warmup☆24Updated last year
- Code for FAB-attack☆32Updated 4 years ago
- Targeted black-box adversarial attack using Bayesian Optimization☆37Updated 4 years ago
- Code and checkpoints of compressed networks for the paper titled "HYDRA: Pruning Adversarially Robust Neural Networks" (NeurIPS 2020) (ht…☆92Updated 2 years ago