Code for "Adversarial attack by dropping information." (ICCV 2021)

Last update: Nov 10, 2022

Overview

AdvDrop

Code for "AdvDrop: Adversarial Attack to DNNs by Dropping Information(ICCV 2021)."

Human can easily recognize visual objects with lost information: even losing most details with only contour reserved, e.g. cartoon. However, in terms of visual perception of Deep Neural Networks (DNNs), the ability for recognizing abstract objects (visual item with lost information) is still a challenge. In this work, we investigate this issue from an adversarial viewpoint: will the performance of DNNs decrease even for the images only losing a little information? Towards this end, we propose a novel adversarial attack, named AdvDrop, which crafts adversarial examples by dropping existing information of images. Previously, most adversarial attacks add extra disturbing information on clean images explicitly. Opposite to previous works, our proposed work explores the adversarial robustness of DNN models in a novel perspective by dropping imperceptible details to craft adversarial examples.

[Paper link](http://arxiv.org/abs/2108.09034)

Installation

We highly recommend using conda.

conda create -n advdrop_env python=3.7
source activate advdrop_env

After activating the virtual environment, install pytorch, numpy and torchattacks with:

pip install --user [the package name]

Download dataset.

Usage

Quick Start

python infod_sample.py

Parameters can be speicified in infod_sample.py.

An example

Adv Images

Acknowledgments

We refered Michael's code for JPEG (torch version) part.
We referred [Harry's code style] (https://github.com/Harry24k/adversarial-attacks-pytorch)

Code for "Adversarial attack by dropping information." (ICCV 2021)

Related tags

Overview

AdvDrop

Installation

Usage

Quick Start

An example

Adv Images

Acknowledgments

Citation

Owner

Ranjie Duan

Automatic Image Background Subtraction

PyContinual (An Easy and Extendible Framework for Continual Learning)

Text mining project; Using distilBERT to predict authors in the classification task authorship attribution.

The official start-up code for paper "FFA-IR: Towards an Explainable and Reliable Medical Report Generation Benchmark."

A large-scale benchmark for co-optimizing the design and control of soft robots, as seen in NeurIPS 2021.

A free, multiplatform SDK for real-time facial motion capture using blendshapes, and rigid head pose in 3D space from any RGB camera, photo, or video.

Large scale embeddings on a single machine.

source code for https://arxiv.org/abs/2005.11248 "Accelerating Antimicrobial Discovery with Controllable Deep Generative Models and Molecular Dynamics"

GndNet: Fast ground plane estimation and point cloud segmentation for autonomous vehicles using deep neural networks.

The Body Part Regression (BPR) model translates the anatomy in a radiologic volume into a machine-interpretable form.

Human Action Controller - A human action controller running on different platforms.

Automate issue discovery for your projects against Lightning nightly and releases.

Random-Afg - Afghanistan Random Old Idz Cloner Tools

This is the official implementation of 3D-CVF: Generating Joint Camera and LiDAR Features Using Cross-View Spatial Feature Fusion for 3D Object Detection, built on SECOND.

Recommendationsystem - Movie-recommendation - matrixfactorization colloborative filtering recommendation system user

DeepLearning Anomalies Detection with Bluetooth Sensor Data

Python interface for SmartRF Sniffer 2 Firmware

Unofficial PyTorch implementation of Neural Additive Models (NAM) by Agarwal, et al.

Official code repository for A Simple Long-Tailed Rocognition Baseline via Vision-Language Model.

Data stream analytics: Implement online learning methods to address concept drift in data streams using the River library. Code for the paper entitled "PWPAE: An Ensemble Framework for Concept Drift Adaptation in IoT Data Streams" accepted in IEEE GlobeCom 2021.