Alternatives and similar repositories for fooling

Users that are interested in fooling are comparing it to the libraries listed below

• dtak / adversarial-robustness-public
  Code for AAAI 2018 accepted paper: "Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing the…
  ☆55Updated 2 years ago
• sunblaze-ucb / decision-boundaries
  code we used in Decision Boundary Analysis of Adversarial Examples https://openreview.net/forum?id=BkpiPMbA-
  ☆28Updated 6 years ago
• max-andr / provable-robustness-max-linear-regions
  Provable Robustness of ReLU networks via Maximization of Linear Regions [AISTATS 2019]
  ☆32Updated 5 years ago
• deepgenerativeclassifier / DeepBayes
  Code release for the ICML 2019 paper "Are generative classifiers more robust to adversarial attacks?"
  ☆23Updated 6 years ago
• yk / icml19_public
  ☆22Updated 5 years ago
• ftramer / MultiRobustness
  Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019
  ☆47Updated 2 years ago
• labsix / adversarial-logit-pairing-analysis
  Analysis of Adversarial Logit Pairing
  ☆60Updated 7 years ago
• MadryLab / adversarial_spatial
  Investigating the robustness of state-of-the-art CNN architectures to simple spatial transformations.
  ☆49Updated 5 years ago
• adversarial-robustness-benchmark / adversarial-robustness-benchmark
  ☆18Updated 5 years ago
• tianzheng4 / Distributionally-Adversarial-Attack
  AAAI 2019 oral presentation
  ☆52Updated 3 months ago
• Bai-Li / STN-Code
  Code for Stability Training with Noise (STN)
  ☆22Updated 4 years ago
• ermongroup / generative_adversary
  Code for the unrestricted adversarial examples paper (NeurIPS 2018)
  ☆64Updated 6 years ago
• cfinlay / tulip
  Scaleable input gradient regularization
  ☆22Updated 6 years ago
• max-andr / cross-lipschitz
  Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation [NeurIPS 2017]
  ☆18Updated 7 years ago
• blackbox-bandits / blackbox-attacks-bandits-priors
  Code for "Prior Convictions: Black-box Adversarial Attacks with Bandits and Priors"
  ☆14Updated 6 years ago
• sunblaze-ucb / blackbox-attacks
  Code used in 'Exploring the Space of Black-box Attacks on Deep Neural Networks' (https://arxiv.org/abs/1712.09491)
  ☆61Updated 7 years ago
• tcwangshiqi-columbia / Interval-Attack
  Interval attacks (adversarial ML)
  ☆21Updated 6 years ago
• aamir-mustafa / super-resolution-adversarial-defense
  Image Super-Resolution as a Defense Against Adversarial Attacks
  ☆90Updated 6 years ago
• cetmann / robustness-interpretability
  Code for the Paper 'On the Connection Between Adversarial Robustness and Saliency Map Interpretability' by C. Etmann, S. Lunz, P. Maass, …
  ☆16Updated 6 years ago
• xiahaifeng1995 / adversarial-robustness
  ☆26Updated 6 years ago
• xuanqing94 / BayesianDefense
  Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network
  ☆62Updated 6 years ago
• machanic / MetaAdvDet
  The official pytorch implementation of ACM MM 19 paper "MetaAdvDet: Towards Robust Detection of Evolving Adversarial Attacks"
  ☆11Updated 4 years ago
• microsoft / denoised-smoothing
  Provably defending pretrained classifiers including the Azure, Google, AWS, and Clarifai APIs
  ☆97Updated 4 years ago
• Cold-Winter / Nattack
  ☆48Updated 4 years ago
• gongzhitaao / adversarial-classifier
  It turns out that adversarial and clean data are not twins, not at all.
  ☆19Updated 8 years ago
• locuslab / projected_sinkhorn
  ☆88Updated last year
• val-iisc / fast-feature-fool
  Data independent universal adversarial perturbations
  ☆62Updated 5 years ago
• ShawnXYang / AT_HE
  ☆35Updated 4 years ago
• MadryLab / relu_stable
  ☆26Updated 2 years ago
• xuanqing94 / RobGAN
  Rob-GAN: Generator, Discriminator and Adversarial Attacker
  ☆85Updated 6 years ago