microsoft / PixelDefend
Source Code for ICRL 2018 Paper: PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples
☆25Updated 5 years ago
Alternatives and similar repositories for PixelDefend:
Users that are interested in PixelDefend are comparing it to the libraries listed below
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆32Updated 4 years ago
- ☆47Updated 4 years ago
- Feature Scattering Adversarial Training (NeurIPS19)☆73Updated 10 months ago
- Adversarial Distributional Training (NeurIPS 2020)☆63Updated 4 years ago
- Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking B…☆57Updated 5 years ago
- Code for "Diversity can be Transferred: Output Diversification for White- and Black-box Attacks"☆53Updated 4 years ago
- ☆54Updated 2 years ago
- Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".☆55Updated 3 years ago
- ☆40Updated last year
- Code for the unrestricted adversarial examples paper (NeurIPS 2018)☆64Updated 5 years ago
- A repository for the query-efficient black-box attack, SignHunter☆23Updated 5 years ago
- Code for the paper "(De)Randomized Smoothing for Certifiable Defense against Patch Attacks" by Alexander Levine and Soheil Feizi.☆17Updated 2 years ago
- code we used in Decision Boundary Analysis of Adversarial Examples https://openreview.net/forum?id=BkpiPMbA-☆27Updated 6 years ago
- ☆85Updated 4 years ago
- Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"☆63Updated 5 years ago
- ☆19Updated 7 years ago
- RayS: A Ray Searching Method for Hard-label Adversarial Attack (KDD2020)☆56Updated 4 years ago
- Code for Stability Training with Noise (STN)☆21Updated 4 years ago
- ☆22Updated 3 years ago
- Universal Adversarial Networks☆33Updated 6 years ago
- ☆12Updated 5 years ago
- Code for Black-Box Adversarial Attack with Transferable Model-based Embedding☆57Updated 4 years ago
- ReColorAdv and other attacks from the NeurIPS 2019 paper "Functional Adversarial Attacks"☆37Updated 2 years ago
- Official TensorFlow implementation of "Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization" (ICML 2019)☆40Updated 4 years ago
- MACER: MAximizing CErtified Radius (ICLR 2020)☆28Updated 5 years ago
- Sparse and Imperceivable Adversarial Attacks (accepted to ICCV 2019).☆40Updated 4 years ago
- [NeurIPS'20 Oral] DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles☆55Updated 3 years ago
- Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019☆47Updated 2 years ago
- Blackbox attacks for deep neural network models☆69Updated 6 years ago
- Understanding Catastrophic Overfitting in Single-step Adversarial Training [AAAI 2021]☆28Updated 2 years ago