code for "Feature Importance-aware Transferable Adversarial Attacks"

Last update: Nov 24, 2022

Related tags

Deep Learning FIA

Overview

Feature Importance-aware Attack(FIA)

This repository contains the code for the paper:

Feature Importance-aware Transferable Adversarial Attacks (ICCV 2021)

Requirements

Python 3.6.8
Keras 2.2.4
Tensorflow 1.14.0
Numpy 1.16.2
Pillow 6.0.0
Scipy 1.2.1

Experiments

Introduction

attack.py : the implementation for different attacks.
verify.py : the code for evaluating generated adversarial examples on different models.

You should download the pretrained models from ( https://github.com/tensorflow/models/tree/master/research/slim, https://github.com/tensorflow/models/tree/archive/research/adv_imagenet_models) before running the code. Then place these model checkpoint files in ./models_tf.

Example Usage

Generate adversarial examples:

python attack.py --model_name vgg_16 --attack_method FIA --layer_name vgg_16/conv3/conv3_3/Relu --ens 30 --probb 0.7 --output_dir ./adv/FIA/

PIM:

python attack.py --model_name vgg_16 --attack_method PIM --amplification_factor 10 --gamma 1 --Pkern_size 3 --output_dir ./adv/PIM/

FIA+PIDIM

python attack.py --model_name vgg_16 --attack_method FIAPIM --layer_name vgg_16/conv3/conv3_3/Relu --ens 30 --probb 0.7 --amplification_factor 2.5 --gamma 0.5 --Pkern_size 3 --image_size 224 --image_resize 250 --prob 0.7 --output_dir ./adv/FIAPIDIM/

Different attack methods have different parameter setting, and the detailed setting can be found in our paper.

Evaluate the attack success rate

python verify.py --ori_path ./dataset/images/ --adv_path ./adv/FIA/ --output_file ./log.csv

Citing this work

If you find this work is useful in your research, please consider citing:

@article{wang2021feature,
  title={Feature Importance-aware Transferable Adversarial Attacks},
  author={Wang, Zhibo and Guo, Hengchang and Zhang, Zhifei and Liu, Wenxin and Qin, Zhan and Ren, Kui},
  journal={arXiv preprint arXiv:2107.14185},
  year={2021}
}

code for "Feature Importance-aware Transferable Adversarial Attacks"

Related tags

Overview

Feature Importance-aware Attack(FIA)

Requirements

Experiments

Introduction

Example Usage

Generate adversarial examples:

Evaluate the attack success rate

Citing this work

Owner

Hengchang Guo

Paddle-Adversarial-Toolbox (PAT) is a Python library for Deep Learning Security based on PaddlePaddle.

ResNEsts and DenseNEsts: Block-based DNN Models with Improved Representation Guarantees

Lunar is a neural network aimbot that uses real-time object detection accelerated with CUDA on Nvidia GPUs.

Streaming Anomaly Detection Framework in Python (Outlier Detection for Streaming Data)

PyTorch implementation of Algorithm 1 of "On the Anatomy of MCMC-Based Maximum Likelihood Learning of Energy-Based Models"

Python code for loading the Aschaffenburg Pose Dataset.

TaCL: Improving BERT Pre-training with Token-aware Contrastive Learning

Article Reranking by Memory-enhanced Key Sentence Matching for Detecting Previously Fact-checked Claims.

Unbalanced Feature Transport for Exemplar-based Image Translation (CVPR 2021)

patchmatch和patchmatchstereo算法的python实现

[NeurIPS 2020] Official Implementation: "SMYRF: Efficient Attention using Asymmetric Clustering".

This is a Python wrapper for TA-LIB based on Cython instead of SWIG.

Repository for the AugmentedPCA Python package.

Official implementation of the Implicit Behavioral Cloning (IBC) algorithm

[NAACL & ACL 2021] SapBERT: Self-alignment pretraining for BERT.

PyTorch implementation of our Adam-NSCL algorithm from our CVPR2021 (oral) paper "Training Networks in Null Space for Continual Learning"

Official Implementation of DE-DETR and DELA-DETR in "Towards Data-Efficient Detection Transformers"

A code implementation of AC-GC: Activation Compression with Guaranteed Convergence, in NeurIPS 2021.

Experimental Python implementation of OpenVINO Inference Engine (very slow, limited functionality). All codes are written in Python. Easy to read and modify.

Consistency Regularization for Adversarial Robustness