ftramer / Excessive-Invariance
Source code for the paper "Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness"
☆25Updated 5 years ago
Alternatives and similar repositories for Excessive-Invariance:
Users that are interested in Excessive-Invariance are comparing it to the libraries listed below
- Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019☆47Updated 2 years ago
- Provable Robustness of ReLU networks via Maximization of Linear Regions [AISTATS 2019]☆32Updated 4 years ago
- Code for the paper "MMA Training: Direct Input Space Margin Maximization through Adversarial Training"☆34Updated 5 years ago
- Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".☆55Updated 3 years ago
- [ICML'20] Multi Steepest Descent (MSD) for robustness against the union of multiple perturbation models.☆26Updated 8 months ago
- Code for Stability Training with Noise (STN)☆21Updated 4 years ago
- Adversarial Defense for Ensemble Models (ICML 2019)☆61Updated 4 years ago
- On the effectiveness of adversarial training against common corruptions [UAI 2022]☆30Updated 2 years ago
- [NeurIPS 2021] Fast Certified Robust Training with Short Warmup☆24Updated last year
- RayS: A Ray Searching Method for Hard-label Adversarial Attack (KDD2020)☆56Updated 4 years ago
- Code release for the ICML 2019 paper "Are generative classifiers more robust to adversarial attacks?"☆23Updated 5 years ago
- Semisupervised learning for adversarial robustness https://arxiv.org/pdf/1905.13736.pdf☆141Updated 5 years ago
- MACER: MAximizing CErtified Radius (ICLR 2020)☆29Updated 5 years ago
- Code for FAB-attack☆32Updated 4 years ago
- Implementation of Confidence-Calibrated Adversarial Training (CCAT).☆45Updated 4 years ago
- Code implementing the experiments described in the NeurIPS 2018 paper "With Friends Like These, Who Needs Adversaries?".☆13Updated 4 years ago
- Understanding and Improving Fast Adversarial Training [NeurIPS 2020]☆96Updated 3 years ago
- Interval attacks (adversarial ML)☆21Updated 5 years ago
- Official implementation for Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds (NeurIPS, 2021).☆23Updated 2 years ago
- Official implementation for paper: A New Defense Against Adversarial Images: Turning a Weakness into a Strength☆38Updated 5 years ago
- "Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers" (NeurIPS 2019, previously called "A Stratified Approach …☆17Updated 5 years ago
- Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation [NeurIPS 2017]☆18Updated 7 years ago
- A Closer Look at Accuracy vs. Robustness☆88Updated 3 years ago
- Benchmark for LP-relaxed robustness verification of ReLU-networks☆41Updated 5 years ago
- Codebase for "Exploring the Landscape of Spatial Robustness" (ICML'19, https://arxiv.org/abs/1712.02779).☆26Updated 5 years ago
- Pytorch implementation of Adversarially Robust Distillation (ARD)☆59Updated 5 years ago
- ☆87Updated 8 months ago
- Implementation of Wasserstein adversarial attacks.☆23Updated 4 years ago
- Pytorch - Adversarial Training☆26Updated 6 years ago
- ☆54Updated 4 years ago