Code for "Adversarial attack by dropping information." (ICCV 2021)

Last update: Nov 10, 2022

Overview

AdvDrop

Code for "AdvDrop: Adversarial Attack to DNNs by Dropping Information(ICCV 2021)."

Human can easily recognize visual objects with lost information: even losing most details with only contour reserved, e.g. cartoon. However, in terms of visual perception of Deep Neural Networks (DNNs), the ability for recognizing abstract objects (visual item with lost information) is still a challenge. In this work, we investigate this issue from an adversarial viewpoint: will the performance of DNNs decrease even for the images only losing a little information? Towards this end, we propose a novel adversarial attack, named AdvDrop, which crafts adversarial examples by dropping existing information of images. Previously, most adversarial attacks add extra disturbing information on clean images explicitly. Opposite to previous works, our proposed work explores the adversarial robustness of DNN models in a novel perspective by dropping imperceptible details to craft adversarial examples.

[Paper link](http://arxiv.org/abs/2108.09034)

Installation

We highly recommend using conda.

conda create -n advdrop_env python=3.7
source activate advdrop_env

After activating the virtual environment, install pytorch, numpy and torchattacks with:

pip install --user [the package name]

Download dataset.

Usage

Quick Start

python infod_sample.py

Parameters can be speicified in infod_sample.py.

An example

Adv Images

Acknowledgments

We refered Michael's code for JPEG (torch version) part.
We referred [Harry's code style] (https://github.com/Harry24k/adversarial-attacks-pytorch)

Code for "Adversarial attack by dropping information." (ICCV 2021)

Related tags

Overview

AdvDrop

Installation

Usage

Quick Start

An example

Adv Images

Acknowledgments

Citation

Owner

Ranjie Duan

Tutorial for the PERFECTING FACTORY 5.0 WITH EDGE-POWERED AI workshop

Implement face detection, and age and gender classification, and emotion classification.

Road Crack Detection Using Deep Learning Methods

The official implementation of the CVPR 2021 paper FAPIS: a Few-shot Anchor-free Part-based Instance Segmenter

这是一个利用facenet和retinaface实现人脸识别的库，可以进行在线的人脸识别。

Classifying cat and dog images using Kaggle dataset

Reproduce results and replicate training fo T0 (Multitask Prompted Training Enables Zero-Shot Task Generalization)

InterFaceGAN - Interpreting the Latent Space of GANs for Semantic Face Editing

Styled Augmented Translation

ColossalAI-Benchmark - Performance benchmarking with ColossalAI

HEAM: High-Efficiency Approximate Multiplier Optimization for Deep Neural Networks

A disassembler for the RP2040 Programmable I/O State-machine!

make ASCII Art by Deep Learning

Deepfake Scanner by Deepware.

SwinIR: Image Restoration Using Swin Transformer

A python/pytorch utility library

Open source Python module for computer vision

Official implementation of "Towards Good Practices for Efficiently Annotating Large-Scale Image Classification Datasets" (CVPR2021)

Code for LIGA-Stereo Detector, ICCV'21

A paper using optimal transport to solve the graph matching problem.