wronnyhuang / metapoison
Craft poisoned data using MetaPoison
☆50Updated 3 years ago
Alternatives and similar repositories for metapoison:
Users that are interested in metapoison are comparing it to the libraries listed below
- RAB: Provable Robustness Against Backdoor Attacks☆39Updated last year
- The code is for our NeurIPS 2019 paper: https://arxiv.org/abs/1910.04749☆33Updated 4 years ago
- Privacy Risks of Securing Machine Learning Models against Adversarial Examples☆44Updated 5 years ago
- ☆25Updated 6 years ago
- Official Implementation of ICLR 2022 paper, ``Adversarial Unlearning of Backdoors via Implicit Hypergradient''☆54Updated 2 years ago
- ABS: Scanning Neural Networks for Back-doors by Artificial Brain Stimulation☆50Updated 2 years ago
- Attacking a dog vs fish classification that uses transfer learning inceptionV3☆70Updated 6 years ago
- ☆64Updated 4 years ago
- ConvexPolytopePosioning☆35Updated 5 years ago
- Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks (RAID 2018)☆47Updated 6 years ago
- ☆79Updated 3 years ago
- Codes for NeurIPS 2021 paper "Adversarial Neuron Pruning Purifies Backdoored Deep Models"☆57Updated last year
- Universal Adversarial Perturbations (UAPs) for PyTorch☆48Updated 3 years ago
- This is for releasing the source code of the ACSAC paper "STRIP: A Defence Against Trojan Attacks on Deep Neural Networks"☆54Updated 4 months ago
- ☆24Updated 2 years ago
- ☆19Updated 2 years ago
- Code for "Label-Consistent Backdoor Attacks"☆55Updated 4 years ago
- Example of the attack described in the paper "Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization"☆21Updated 5 years ago
- Code for "On the Trade-off between Adversarial and Backdoor Robustness" (NIPS 2020)☆17Updated 4 years ago
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆32Updated 4 years ago
- [ICLR'21] Dataset Inference for Ownership Resolution in Machine Learning☆32Updated 2 years ago
- ☆26Updated 6 years ago
- Code for identifying natural backdoors in existing image datasets.☆15Updated 2 years ago
- Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks (ICLR '20)☆29Updated 4 years ago
- Anti-Backdoor learning (NeurIPS 2021)☆82Updated last year
- This is the implementation for CVPR 2022 Oral paper "Better Trigger Inversion Optimization in Backdoor Scanning."☆24Updated 2 years ago
- Implementation of the paper "MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation".☆32Updated 3 years ago
- CVPR 2021 Official repository for the Data-Free Model Extraction paper. https://arxiv.org/abs/2011.14779☆71Updated 11 months ago
- ☆44Updated 4 years ago
- ☆13Updated 3 years ago