-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
PatchFool implementation #2163
base: main
Are you sure you want to change the base?
PatchFool implementation #2163
Commits on Dec 22, 2023
-
Add initial PatchFool implementation
Add a new evasion attack on vision transformers. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 9c92350 - Browse repository at this point
Copy the full SHA 9c92350View commit details -
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for ec385c3 - Browse repository at this point
Copy the full SHA ec385c3View commit details -
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 57b54e4 - Browse repository at this point
Copy the full SHA 57b54e4View commit details -
Skip the class token when calculating the most influential image patch. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for a3ae044 - Browse repository at this point
Copy the full SHA a3ae044View commit details -
Add preprocessing before feature extraction
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for c9cc837 - Browse repository at this point
Copy the full SHA c9cc837View commit details -
Update classifier and algorithm steps
Update classifier to use DeiT from the timm library. Fix algorithm details. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 8f0ed1b - Browse repository at this point
Copy the full SHA 8f0ed1bView commit details -
- Calculate the attention loss as negative log likelihood - Clamp perturbations after random init Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 1f51b79 - Browse repository at this point
Copy the full SHA 1f51b79View commit details -
- Fix input normalisation and scaling. - Fix patch application to happen only once after final iteration - Add skip_loss_att option Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for d0c4ba7 - Browse repository at this point
Copy the full SHA d0c4ba7View commit details -
Use tqdm indication bar showing the attack iterations. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 2c312a9 - Browse repository at this point
Copy the full SHA 2c312a9View commit details -
Move attention weights calculation to PyTorchEstimator
- Move get_attention weights to PyTorchEstimator and generalise it by making return_nodes a list of strings provided by the user as an argument. - Define patch size on the attack side. - Remove PyTorchClassifierDeiT and reuse the exisitng PyTorchClassifier. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for da6bb3a - Browse repository at this point
Copy the full SHA da6bb3aView commit details -
Update the attack parameters checks
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 9f6ad4b - Browse repository at this point
Copy the full SHA 9f6ad4bView commit details -
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 71d51de - Browse repository at this point
Copy the full SHA 71d51deView commit details -
Add verbose option for tqdm. Remove unused variable i_max_iter. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for b8e6c28 - Browse repository at this point
Copy the full SHA b8e6c28View commit details -
Remove layer as an internal function parameter
Use directly the attribute patch_layer. Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for a69d93f - Browse repository at this point
Copy the full SHA a69d93fView commit details -
Add PatchFool attack example notebook
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 28a0ff2 - Browse repository at this point
Copy the full SHA 28a0ff2View commit details -
Signed-off-by: Teodora Sechkova <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for da05de1 - Browse repository at this point
Copy the full SHA da05de1View commit details