google-deepmind / interval-bound-propagation
This repository contains a simple implementation of Interval Bound Propagation (IBP) using TensorFlow: https://arxiv.org/abs/1810.12715
☆150Updated 4 years ago
Related projects: ⓘ
- Certified defense to adversarial examples using CROWN and IBP. Also includes GPU implementation of CROWN verification algorithm (in PyTor…☆93Updated 3 years ago
- Reference implementations for RecurJac, CROWN, FastLin and FastLip (Neural Network verification and robustness certification algorithms)…☆25Updated 4 years ago
- ☆85Updated last month
- Benchmark for LP-relaxed robustness verification of ReLU-networks☆40Updated 5 years ago
- ☆26Updated last year
- Efficient Robustness Verification for ReLU networks (this repository is outdated, don't use; checkout our new implementation at https://g…☆30Updated 4 years ago
- Randomized Smoothing of All Shapes and Sizes (ICML 2020).☆50Updated 4 years ago
- CROWN: A Neural Network Verification Framework for Networks with General Activation Functions☆38Updated 5 years ago
- [ICLR 2020] Code for paper "Robustness Verification for Transformers"☆25Updated last year
- Official implementation for Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds (NeurIPS, 2021).☆22Updated 2 years ago
- "Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers" (NeurIPS 2019, previously called "A Stratified Approach …☆17Updated 4 years ago
- ☆37Updated 4 years ago
- Targeted black-box adversarial attack using Bayesian Optimization☆35Updated 4 years ago
- Official implementation for paper: A New Defense Against Adversarial Images: Turning a Weakness into a Strength☆37Updated 4 years ago
- This repo keeps track of popular provable training and verification approaches towards robust neural networks, including leaderboards on …☆99Updated last year
- Convex Layerwise Adversarial Training (COLT)☆29Updated 3 years ago
- CLEVER (Cross-Lipschitz Extreme Value for nEtwork Robustness) is a robustness metric for deep neural networks☆60Updated 3 years ago
- Provable Robustness of ReLU networks via Maximization of Linear Regions [AISTATS 2019]☆31Updated 4 years ago
- Code for the paper "Understanding Generalization through Visualizations"☆60Updated 3 years ago
- Public code for a paper "Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks."☆34Updated 5 years ago
- Convolutional Neural Tangent Kernel☆108Updated 4 years ago
- Interval attacks (adversarial ML)☆21Updated 5 years ago
- Provably defending pretrained classifiers including the Azure, Google, AWS, and Clarifai APIs☆96Updated 3 years ago
- Code for "Robustness May Be at Odds with Accuracy"☆91Updated last year
- Semisupervised learning for adversarial robustness https://arxiv.org/pdf/1905.13736.pdf☆136Updated 4 years ago
- Investigating the robustness of state-of-the-art CNN architectures to simple spatial transformations.☆49Updated 5 years ago
- Certifying Geometric Robustness of Neural Networks☆15Updated last year
- Code for our NeurIPS 2019 *spotlight* "Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers"☆223Updated 4 years ago
- Code for Stability Training with Noise (STN)☆21Updated 3 years ago
- Source code for the paper "Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness"☆26Updated 4 years ago