Code for "Adversarial attack by dropping information." (ICCV 2021)

Last update: Nov 10, 2022

Overview

AdvDrop

Code for "AdvDrop: Adversarial Attack to DNNs by Dropping Information(ICCV 2021)."

Human can easily recognize visual objects with lost information: even losing most details with only contour reserved, e.g. cartoon. However, in terms of visual perception of Deep Neural Networks (DNNs), the ability for recognizing abstract objects (visual item with lost information) is still a challenge. In this work, we investigate this issue from an adversarial viewpoint: will the performance of DNNs decrease even for the images only losing a little information? Towards this end, we propose a novel adversarial attack, named AdvDrop, which crafts adversarial examples by dropping existing information of images. Previously, most adversarial attacks add extra disturbing information on clean images explicitly. Opposite to previous works, our proposed work explores the adversarial robustness of DNN models in a novel perspective by dropping imperceptible details to craft adversarial examples.

[Paper link](http://arxiv.org/abs/2108.09034)

Installation

We highly recommend using conda.

conda create -n advdrop_env python=3.7
source activate advdrop_env

After activating the virtual environment, install pytorch, numpy and torchattacks with:

pip install --user [the package name]

Download dataset.

Usage

Quick Start

python infod_sample.py

Parameters can be speicified in infod_sample.py.

An example

Adv Images

Acknowledgments

We refered Michael's code for JPEG (torch version) part.
We referred [Harry's code style] (https://github.com/Harry24k/adversarial-attacks-pytorch)

Code for "Adversarial attack by dropping information." (ICCV 2021)

Related tags

Overview

AdvDrop

Installation

Usage

Quick Start

An example

Adv Images

Acknowledgments

Citation

Owner

Ranjie Duan

Template repository to build PyTorch projects from source on any version of PyTorch/CUDA/cuDNN.

"Inductive Entity Representations from Text via Link Prediction" @ The Web Conference 2021

Official implementation of the paper 'Details or Artifacts: A Locally Discriminative Learning Approach to Realistic Image Super-Resolution' in CVPR 2022

🔪 Elimination based Lightweight Neural Net with Pretrained Weights

RuleBERT: Teaching Soft Rules to Pre-Trained Language Models

meProp: Sparsified Back Propagation for Accelerated Deep Learning (ICML 2017)

Mix3D: Out-of-Context Data Augmentation for 3D Scenes (3DV 2021)

Official codebase used to develop Vision Transformer, MLP-Mixer, LiT and more.

A PyTorch implementation of QANet.

Single-Shot Motion Completion with Transformer

"Moshpit SGD: Communication-Efficient Decentralized Training on Heterogeneous Unreliable Devices", official implementation

《A-CNN: Annularly Convolutional Neural Networks on Point Clouds》(2019)

Monocular Depth Estimation Using Laplacian Pyramid-Based Depth Residuals

Graph-Refined Convolutional Network for Multimedia Recommendation with Implicit Feedback

[NeurIPS'21] "AugMax: Adversarial Composition of Random Augmentations for Robust Training" by Haotao Wang, Chaowei Xiao, Jean Kossaifi, Zhiding Yu, Animashree Anandkumar, and Zhangyang Wang.

Implementation of character based convolutional neural network

Gans-in-action - Companion repository to GANs in Action: Deep learning with Generative Adversarial Networks

Sequence-tagging using deep learning

Morphable Detector for Object Detection on Demand

Anchor Retouching via Model Interaction for Robust Object Detection in Aerial Images