Alternatives and similar repositories for fooling

Users that are interested in fooling are comparing it to the libraries listed below

• deepgenerativeclassifier / DeepBayes
  Code release for the ICML 2019 paper "Are generative classifiers more robust to adversarial attacks?"
  ☆23Updated 6 years ago
• max-andr / provable-robustness-max-linear-regions
  Provable Robustness of ReLU networks via Maximization of Linear Regions [AISTATS 2019]
  ☆31Updated 5 years ago
• ftramer / MultiRobustness
  Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019
  ☆47Updated 2 years ago
• Bai-Li / STN-Code
  Code for Stability Training with Noise (STN)
  ☆22Updated 4 years ago
• sunblaze-ucb / decision-boundaries
  code we used in Decision Boundary Analysis of Adversarial Examples https://openreview.net/forum?id=BkpiPMbA-
  ☆28Updated 6 years ago
• dtak / adversarial-robustness-public
  Code for AAAI 2018 accepted paper: "Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing the…
  ☆55Updated 2 years ago
• uds-lsv / evaluating-logit-pairing-methods
  Logit Pairing Methods Can Fool Gradient-Based Attacks [NeurIPS 2018 Workshop on Security in Machine Learning]
  ☆19Updated 6 years ago
• yk / icml19_public
  ☆22Updated 5 years ago
• labsix / adversarial-logit-pairing-analysis
  Analysis of Adversarial Logit Pairing
  ☆60Updated 7 years ago
• amirgholami / TRAttack
  [CVPR'19] Trust Region Based Adversarial Attack
  ☆20Updated 4 years ago
• adversarial-robustness-benchmark / adversarial-robustness-benchmark
  ☆18Updated 5 years ago
• ermongroup / generative_adversary
  Code for the unrestricted adversarial examples paper (NeurIPS 2018)
  ☆65Updated 6 years ago
• MadryLab / adversarial_spatial
  Investigating the robustness of state-of-the-art CNN architectures to simple spatial transformations.
  ☆49Updated 6 years ago
• cetmann / robustness-interpretability
  Code for the Paper 'On the Connection Between Adversarial Robustness and Saliency Map Interpretability' by C. Etmann, S. Lunz, P. Maass, …
  ☆16Updated 6 years ago
• tcwangshiqi-columbia / Interval-Attack
  Interval attacks (adversarial ML)
  ☆21Updated 6 years ago
• M4xim4l / InNOutRobustness
  Adversarial Robustness on In- and Out-Distribution Improves Explainability
  ☆12Updated 3 years ago
• tonyduan / rs4a
  Randomized Smoothing of All Shapes and Sizes (ICML 2020).
  ☆51Updated 5 years ago
• Cold-Winter / Nattack
  ☆48Updated 4 years ago
• KaidiXu / StrAttack
  StrAttack, ICLR 2019
  ☆33Updated 6 years ago
• ttbrunner / biased_boundary_attack_avc
  Implementation of the Biased Boundary Attack for the NeurIPS 2018 Adversarial Vision Challenge
  ☆13Updated 5 years ago
• locuslab / projected_sinkhorn
  ☆88Updated last year
• max-andr / cross-lipschitz
  Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation [NeurIPS 2017]
  ☆18Updated 7 years ago
• ShawnXYang / AT_HE
  ☆35Updated 4 years ago
• tianzheng4 / Distributionally-Adversarial-Attack
  AAAI 2019 oral presentation
  ☆53Updated 3 months ago
• gongzhitaao / adversarial-classifier
  It turns out that adversarial and clean data are not twins, not at all.
  ☆19Updated 8 years ago
• xiahaifeng1995 / adversarial-robustness
  ☆26Updated 6 years ago
• blackbox-bandits / blackbox-attacks-bandits-priors
  Code for "Prior Convictions: Black-box Adversarial Attacks with Bandits and Priors"
  ☆14Updated 6 years ago
• machanic / MetaAdvDet
  The official pytorch implementation of ACM MM 19 paper "MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks"
  ☆11Updated 4 years ago
• StephanZheng / neural-fingerprinting
  ☆29Updated 6 years ago
• val-iisc / fast-feature-fool
  Data independent universal adversarial perturbations
  ☆63Updated 5 years ago