eth-sri / adaptive-auto-attack
☆23Updated 3 years ago
Alternatives and similar repositories for adaptive-auto-attack:
Users that are interested in adaptive-auto-attack are comparing it to the libraries listed below
- Foolbox implementation for NeurIPS 2021 Paper: "Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints".☆25Updated 3 years ago
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆32Updated 4 years ago
- Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"☆53Updated 4 years ago
- Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".☆55Updated 3 years ago
- Universal Adversarial Perturbations (UAPs) for PyTorch☆48Updated 3 years ago
- ☆22Updated last year
- ☆83Updated 4 years ago
- ☆65Updated last year
- PyTorch implementations of Adversarial defenses and utils.☆34Updated last year
- The implementation of our paper: Composite Adversarial Attacks (AAAI2021)☆30Updated 3 years ago
- [ICLR'21] Dataset Inference for Ownership Resolution in Machine Learning☆32Updated 2 years ago
- [ICLR 2021] "Robust Overfitting may be mitigated by properly learned smoothening" by Tianlong Chen*, Zhenyu Zhang*, Sijia Liu, Shiyu Chan…☆46Updated 3 years ago
- Code for "On Adaptive Attacks to Adversarial Example Defenses"☆86Updated 4 years ago
- ☆40Updated last year
- Code for our NeurIPS 2020 paper Backpropagating Linearly Improves Transferability of Adversarial Examples.☆42Updated 2 years ago
- Feature Scattering Adversarial Training (NeurIPS19)☆72Updated 9 months ago
- the paper "Geometry-aware Instance-reweighted Adversarial Training" ICLR 2021 oral☆59Updated 3 years ago
- ☆22Updated 3 years ago
- Implementation of Wasserstein adversarial attacks.☆22Updated 4 years ago
- Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks☆38Updated 3 years ago
- Certified robustness "for free" using off-the-shelf diffusion models and classifiers☆38Updated last year
- Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks☆45Updated 3 years ago
- Adversarial Distributional Training (NeurIPS 2020)☆62Updated 4 years ago
- Code for "PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier"☆39Updated last year
- Sparse and Imperceivable Adversarial Attacks (accepted to ICCV 2019).☆40Updated 4 years ago
- ☆39Updated last year
- ☆57Updated 2 years ago
- PyTorch implementation of BPDA+EOT attack to evaluate adversarial defense with an EBM☆24Updated 4 years ago
- Code for ICML2019 Paper "On the Convergence and Robustness of Adversarial Training"☆34Updated 4 years ago
- Code for the paper "(De)Randomized Smoothing for Certifiable Defense against Patch Attacks" by Alexander Levine and Soheil Feizi.☆18Updated 2 years ago