google-research / active-adversarial-tests

Related projects ⓘ

Alternatives and complementary repositories for active-adversarial-tests

• wielandbrendel / adaptive_attacks_paper
  Code for "On Adaptive Attacks to Adversarial Example Defenses"
  ☆85Updated 3 years ago
• point0bar1 / ebm-defense
  PyTorch implementation of BPDA+EOT attack to evaluate adversarial defense with an EBM
  ☆23Updated 4 years ago
• eth-sri / adaptive-auto-attack
  ☆23Updated 3 years ago
• Ping-C / certifiedpatchdefense
  Repository for Certified Defenses for Adversarial Patch ICLR-2020
  ☆32Updated 4 years ago
• cassidylaidlaw / perceptual-advex
  Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".
  ☆54Updated 2 years ago
• watml / fast-wasserstein-adversarial
  Implementation of Wasserstein adversarial attacks.
  ☆23Updated 3 years ago
• fra31 / sparse-imperceivable-attacks
  Sparse and Imperceivable Adversarial Attacks (accepted to ICCV 2019).
  ☆40Updated 4 years ago
• kenny-co / sgd-uap-torch
  Universal Adversarial Perturbations (UAPs) for PyTorch
  ☆46Updated 3 years ago
• boschresearch / meta-rs
  Companion code for the paper "Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks" by Yatsura et a…
  ☆8Updated 3 years ago
• hsouri / Sleeper-Agent
  ☆60Updated 9 months ago
• pralab / ImageNet-Patch
  ☆38Updated 10 months ago
• pralab / Fast-Minimum-Norm-FMN-Attack
  Foolbox implementation for NeurIPS 2021 Paper: "Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints".
  ☆25Updated 2 years ago
• fra31 / sparse-rs
  Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks
  ☆44Updated 2 years ago
• DequanWang / dent
  Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks
  ☆37Updated 3 years ago
• Equationliu / GA-Attack
  SaTML 2023, 1st place in CVPR’21 Security AI Challenger: Unrestricted Adversarial Attacks on ImageNet.
  ☆24Updated last year
• cassidylaidlaw / ReColorAdv
  ReColorAdv and other attacks from the NeurIPS 2019 paper "Functional Adversarial Attacks"
  ☆36Updated 2 years ago
• v-wangg / OrthogonalPGD
  ☆22Updated 3 years ago
• JHL-HUST / RLFAT
  ☆13Updated 4 years ago
• ZiangYan / pda.pytorch
  Implementation of our ICLR 2021 paper: Policy-Driven Attack: Learning to Query for Hard-label Black-box Adversarial Examples.
  ☆11Updated 3 years ago
• Alan-Qin / Transfer_attack_RAP
  Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation (NeurIPS 2022)
  ☆33Updated last year
• uclaml / RayS
  RayS: A Ray Searching Method for Hard-label Adversarial Attack (KDD2020)
  ☆56Updated 4 years ago
• HanxunH / MDAttack
  [Machine Learning 2023] Imbalanced Gradients: A Subtle Cause of Overestimated Adversarial Robustness
  ☆17Updated 4 months ago
• TLMichael / Delusive-Adversary
  [NeurIPS 2021] Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training
  ☆31Updated 2 years ago
• fra31 / evaluating-adaptive-test-time-defenses
  ☆21Updated last year
• tml-epfl / adv-training-corruptions
  On the effectiveness of adversarial training against common corruptions [UAI 2022]
  ☆30Updated 2 years ago
• ermongroup / ODS
  Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"
  ☆53Updated 4 years ago
• val-iisc / Hard-Label-Model-Stealing
  ☆27Updated 2 years ago
• alevine0 / patchSmoothing
  Code for the paper "(De)Randomized Smoothing for Certifiable Defense against Patch Attacks" by Alexander Levine and Soheil Feizi.
  ☆17Updated 2 years ago
• xherdan76 / A-Unified-Approach-to-Interpreting-and-Boosting-Adversarial-Transferability
  A Unified Approach to Interpreting and Boosting Adversarial Transferability (ICLR2021)
  ☆28Updated 2 years ago
• ethz-spylab / diffusion_denoised_smoothing
  Certified robustness "for free" using off-the-shelf diffusion models and classifiers
  ☆36Updated last year