Alternatives and similar repositories for Self-Ensemble-Adversarial-Training

Users that are interested in Self-Ensemble-Adversarial-Training are comparing it to the libraries listed below

• Alan-Qin / Transfer_attack_RAP
  Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation (NeurIPS 2022)
  ☆33Updated 2 years ago
• qizhangli / MoreBayesian-attack
  Code for our ICLR 2023 paper Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples.
  ☆18Updated 2 years ago
• xherdan76 / A-Unified-Approach-to-Interpreting-and-Boosting-Adversarial-Transferability
  A Unified Approach to Interpreting and Boosting Adversarial Transferability (ICLR2021)
  ☆31Updated 3 years ago
• cassidylaidlaw / ReColorAdv
  ReColorAdv and other attacks from the NeurIPS 2019 paper "Functional Adversarial Attacks"
  ☆38Updated 3 years ago
• dongyp13 / memorization-AT
  ☆21Updated 3 years ago
• jiaxiaojunQAQ / FGSM-SDI
  Code for Boosting fast adversarial training with learnable adversarial initialization (TIP2022)
  ☆29Updated 2 years ago
• bymavis / CAS_ICLR2021
  ☆58Updated 3 years ago
• point0bar1 / ebm-defense
  PyTorch implementation of BPDA+EOT attack to evaluate adversarial defense with an EBM
  ☆25Updated 5 years ago
• Framartin / lgv-geometric-transferability
  Source of the ECCV22 paper "LGV: Boosting Adversarial Example Transferability from Large Geometric Vicinity"
  ☆18Updated 7 months ago
• TLMichael / Delusive-Adversary
  [NeurIPS 2021] Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training
  ☆32Updated 3 years ago
• val-iisc / GAMA-GAT
  Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses, NeurIPS Spotlight 2020
  ☆27Updated 4 years ago
• qizhangli / linbp-attack
  Code for our NeurIPS 2020 paper Backpropagating Linearly Improves Transferability of Adversarial Examples.
  ☆42Updated 2 years ago
• kai-wen-yang / CD-VAE
  [NeurIPS 2021] "Class-Disentanglement and Applications in Adversarial Detection and Defense"
  ☆46Updated 3 years ago
• zjfheart / Geometry-aware-Instance-reweighted-Adversarial-Training
  the paper "Geometry-aware Instance-reweighted Adversarial Training" ICLR 2021 oral
  ☆59Updated 4 years ago
• kenny-co / sgd-uap-torch
  Universal Adversarial Perturbations (UAPs) for PyTorch
  ☆49Updated 4 years ago
• xpf / Data-Efficient-Backdoor-Attacks
  Data-Efficient Backdoor Attacks
  ☆18Updated 3 years ago
• dongyp13 / Adversarial-Distributional-Training
  Adversarial Distributional Training (NeurIPS 2020)
  ☆63Updated 4 years ago
• v-wangg / OrthogonalPGD
  ☆22Updated 4 years ago
• hannxu123 / fair_robust
  ☆11Updated 3 years ago
• PKU-ML / CFA
  ☆20Updated 7 months ago
• jinghuichen / AWM
  Github repo for One-shot Neural Backdoor Erasing via Adversarial Weight Masking (NeurIPS 2022)
  ☆15Updated 2 years ago
• TransEmbedBA / TREMBA
  Code for Black-Box Adversarial Attack with Transferable Model-based Embedding
  ☆58Updated 5 years ago
• zibojia / RSLAD
  This is the official code for "Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better"
  ☆45Updated 4 years ago
• fra31 / sparse-imperceivable-attacks
  Sparse and Imperceivable Adversarial Attacks (accepted to ICCV 2019).
  ☆42Updated 4 years ago
• qizhangli / nobox-attacks
  Code for our NeurIPS 2020 paper Practical No-box Adversarial Attacks against DNNs.
  ☆34Updated 4 years ago
• VITA-Group / Alleviate-Robust-Overfitting
  [ICLR 2021] "Robust Overfitting may be mitigated by properly learned smoothening" by Tianlong Chen*, Zhenyu Zhang*, Sijia Liu, Shiyu Chan…
  ☆47Updated 3 years ago
• Kira0096 / CGATTACK
  Official repository for CVPR 2022 paper 'Boosting Black-Box Attack with Partially Transferred Conditional Adversarial Distribution'
  ☆27Updated 3 years ago
• kaiwenzha / contrastive-poisoning
  [ICLR 2023, Spotlight] Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning
  ☆31Updated last year
• ChaojianYu / Robust-Weight-Perturbation
  Implementation for <Robust Weight Perturbation for Adversarial Training> in IJCAI'22.
  ☆16Updated 3 years ago
• Alibaba-AAIG / Beyond-ImageNet-Attack
  Beyond imagenet attack (accepted by ICLR 2022) towards crafting adversarial examples for black-box domains.
  ☆60Updated 3 years ago