How do we set constrain on L2 distance for cw L2 attack and deepfool attack? In attack publications authors mention smaller Lp distance to claim a stronger attack, but how to limit L2 distance to a fixed value is confusing. For L-ifinity it can be a…
I am trying to load a pre-trained ResNet model from the MadryLab CIFAR-10 challenge into CleverHans to compute transfer attacks.
However restoring the saved models into the model_zoo.madry_lab_challenges.cifar10_model.ResNet object does not work. It…
I use the cleverhans code for cw to produce adversarial examples on Imagenet. The target model is InceptionV3(from keras) and I want to use cw for targeted attack. But when I save the adv image, they have changed a lot from the original images. I…
Suppose I load up the MNIST dataset with Cleverhans and attack an image with FGM. Any image I load via the Cleverhans MNIST dataset already has its pixel values constrained to [0, 1], and the same is true after I attack the image (suppose I clip the…
I'm trying to do Saliency Map Method using cleverhans.
My model needs to be keras sequential so for that reason I've searched and found cleverhans.utils_keras, Sequential uses KerasModelWrapper. But for some reason I still get it should be…
What is going wrong with this code? I have generated adversarial images using cleverhans API - generate_np method. And using the default cleverhans CNN classifier to classify the images. The test accuracy is very low as expected when I use the model…
I am replicating one of the basic MNIST tutorials using cleverhans. I have access to a multi-gpu machine and it seems that the library is taking full advantage of the multi-gpu architecture during training, which is great.
I would like, however, to…
I'm trying to get familiar with tensorflow and cleverhans. But it seems that I get functionalities mixed up.
I set up a simple model with tensorflow, train it and then want to craft an adversarial image with cleverhans' CarliniWagnerL2-attack. I…
I'm playing with the mnist_tutorial_pytorch.py, and I set the eps = 0 in the fgsm_params dictionary.
Based on my understanding this means that fgsm attack should do nothing and the target model's accuracy will not decrease.
But I got a pytorch…
I'm trying to generate MNIST adversarial images using generate_np methods. Getting this below exception. Using the default CNN model from cleverhans.
FailedPreconditionError: Error while reading resource variable dense_2/bias from Container:…
I am trying to follow this blog https://brunolopezgarcia.github.io/2018/05/09/Crafting-adversarial-faces.html to generate adversarial face images against Facenet. The code is here…
How train a googlenet model adversarially on an own image classification dataset?
For example: Using cleverhans library, the data that has batches to run the attacks on are MNIST and CIFAR.
I trained an image classifier with my own data (Googlenet)…
WhenI try to run from github.com/behzadanksu/rl-attack
python train.py --env Breakout --noisy --save-dir ./data/Breakout/ --attack fgsm --num-steps 20 --attack-prob 1.0
from cleverhans library, I get the following error. How can I avoid…
I am using a pretrained model that someone else has created, they have only released the model weights. Currently I am importing the model weights into my graph and calling them by the tensor names. However, this seems incompatible with cleverhans'…