Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains (ICLR'2022)
This is the Pytorch code for our paper Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains). In this paper, with only the knowledge of the ImageNet domain, we propose a Beyond ImageNet Attack (BIA) to investigate the transferability towards black-box domains (unknown classification tasks).
Requirement
- Python 3.7
- Pytorch 1.8.0
- torchvision 0.9.0
- numpy 1.20.2
- scipy 1.7.0
- pandas 1.3.0
- opencv-python 4.5.2.54
- joblib 0.14.1
- Pillow 6.1
Dataset
-
Download the ImageNet training dataset.
- ImageNet Training Set.
-
Download the testing dataset.
- ImageNet Validation Set. We also provide precomputed imagenet validation dataset in here (download it to
imagenetfolder and then runconvert.py, thanks @aaron-xichen). - CUB-200-2011
- Stanford Cars
- FGVC AirCraft
- CIFAR-10, CIFAR-100, STL-10 and SVHN can be automatically downloaded via
torchvision.dataset
- ImageNet Validation Set. We also provide precomputed imagenet validation dataset in here (download it to
Note: After downloading CUB-200-2011, Standford Cars and FGVC Aircraft, you should set the "self.rawdata_root" (DCL_finegrained/config.py: lines 59-75) to your saved path.
Target model
The checkpoint of target model should be put into model folder.
- CUB-200-2011, Stanford Cars and FGVC AirCraft can be downloaded from here.
- CIFAR-10, CIFAR-100, STL-10 and SVHN can be automatically downloaded.
- ImageNet pre-trained models are available at torchvision.
Pretrained-Generators
Adversarial generators are trained against following four ImageNet pre-trained models.
- VGG19
- VGG16
- ResNet152
- DenseNet169
After finishing training, the resulting generator will be put into saved_models folder. You can also download our pretrained-generator from here.
Train
Train the generator using vanilla BIA (RN: False, DA: False)
python train.py --model_type vgg16 --train_dir your_imagenet_path --RN False --DA False
your_imagenet_path is the path where you download the imagenet training set.
Evaluation
Evaluate the performance of vanilla BIA (RN: False, DA: False)
python eval.py --model_type vgg16 --RN False --DA False
Citing this work
If you find this work is useful in your research, please consider citing:
@inproceedings{Zhang2022BIA,
author = {Qilong Zhang and
Xiaodan Li and
Yuefeng Chen and
Jingkuan Song and
Lianli Gao and
Yuan He and
Hui Xue},
title = {Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains},
Booktitle = {International Conference on Learning Representations},
year = {2022}
}
Acknowledge
Thank @aaron-xichen and @Muzammal-Naseer for sharing their codes.
2 Oct 5, 2022
32 Dec 26, 2022
![[ICLR 2022] Pretraining Text Encoders with Adversarial Mixture of Training Signal Generators](https://github.com/microsoft/AMOS/raw/main/AMOS.png)
22 Sep 15, 2022
21 Dec 27, 2022
59 Nov 24, 2022
54 Dec 17, 2022
59 Dec 17, 2022
175 Dec 1, 2022
896 Jan 04, 2023
17 Mar 10, 2022
270 Nov 30, 2022
3 Nov 03, 2022
75 Dec 16, 2022
74 Dec 28, 2022
5 Jan 27, 2022
55 Dec 18, 2022
527 Dec 04, 2022
5 Jun 08, 2022
23 Dec 26, 2022
11 Dec 12, 2022
1.9k Jan 07, 2023
58 Dec 17, 2022
27 Jul 08, 2022
11 Nov 15, 2022
8 Nov 11, 2022
154 Dec 15, 2022
208 Dec 28, 2022
326 Jan 02, 2023