hele2069/orthogonalpgd

Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent

This repository contains the code used in the paper

The main attack class can be found in attack.py. We then give a few examples of the case studies we talk about in the paper.

We include defense scripts for the trapdoor and DLA defenses because we re-implemented these in pytorch ourself, and so we need no author permission to distribute these files. We do not include pre-trained models because the original defense authors trained models for us---we will obtain their permission to release those pretrained models in a full code release. Similarly we will release other defense with author permission on code reuse.

The script "run_experiment.py" contains the necessary boilerplate to run an attack given pretrained model weights.