sycny / ZIP
PyTorch implementation for 'Black-box Backdoor Defense via Zero-shot Image Purification'
☆10Updated last year
Related projects ⓘ
Alternatives and complementary repositories for ZIP
- [CVPR 2023] Backdoor Defense via Adaptively Splitting Poisoned Dataset☆44Updated 7 months ago
- [BMVC 2023] Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning☆15Updated last year
- Backdoor Safety Tuning (NeurIPS 2023 & 2024 Spotlight)☆24Updated last week
- ☆20Updated last year
- Implementation of BadCLIP https://arxiv.org/pdf/2311.16194.pdf☆17Updated 8 months ago
- This is the implementation for CVPR 2022 Oral paper "Better Trigger Inversion Optimization in Backdoor Scanning."☆24Updated 2 years ago
- The official implementation of our CVPR 2023 paper "Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consist…☆19Updated last year
- Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation (NeurIPS 2022)☆33Updated last year
- ☆10Updated 5 months ago
- Github repo for One-shot Neural Backdoor Erasing via Adversarial Weight Masking (NeurIPS 2022)☆14Updated last year
- Code Repo for the NeurIPS 2023 paper "VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models"☆19Updated 2 months ago
- ☆28Updated 2 years ago
- Code for paper: PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models, IEEE ICASSP 2024. Demo//124.220.228.133:11107☆12Updated 3 months ago
- Official Implementation of ICLR 2022 paper, ``Adversarial Unlearning of Backdoors via Implicit Hypergradient''☆50Updated 2 years ago
- A toolbox for backdoor attacks.☆19Updated last year
- Decision-based Adversarial Attack with Frequency Mixup☆21Updated last year
- The official implementation of USENIX Security'23 paper "Meta-Sift" -- Ten minutes or less to find a 1000-size or larger clean subset on …☆18Updated last year
- Reconstructive Neuron Pruning for Backdoor Defense (ICML 2023)☆28Updated 11 months ago
- ☆17Updated 2 years ago
- ☆19Updated 2 years ago
- ☆17Updated 2 months ago
- ICCV 2021, We find most existing triggers of backdoor attacks in deep learning contain severe artifacts in the frequency domain. This Rep…☆41Updated 2 years ago
- ☆15Updated 7 months ago
- Official codes for GRA (Accepted by ICCV2023)☆16Updated last year
- Codes for NeurIPS 2021 paper "Adversarial Neuron Pruning Purifies Backdoored Deep Models"☆55Updated last year
- A curated list of papers for the transferability of adversarial examples☆55Updated 4 months ago
- [ICLR 2022] "Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?" by Yonggan Fu, Shunyao Zhang, Shang Wu…☆32Updated 2 years ago
- Code for the paper "Autoregressive Perturbations for Data Poisoning" (NeurIPS 2022)☆18Updated 2 months ago
- Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems☆24Updated 3 years ago
- Official Implementation of NIPS 2022 paper Pre-activation Distributions Expose Backdoor Neurons☆14Updated last year