Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains (ICLR'2022)
This is the Pytorch code for our paper Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains). In this paper, with only the knowledge of the ImageNet domain, we propose a Beyond ImageNet Attack (BIA) to investigate the transferability towards black-box domains (unknown classification tasks).
Requirement
- Python 3.7
- Pytorch 1.8.0
- torchvision 0.9.0
- numpy 1.20.2
- scipy 1.7.0
- pandas 1.3.0
- opencv-python 4.5.2.54
- joblib 0.14.1
- Pillow 6.1
Dataset
-
Download the ImageNet training dataset.
- ImageNet Training Set.
-
Download the testing dataset.
- ImageNet Validation Set. We also provide precomputed imagenet validation dataset in here (download it to
imagenetfolder and then runconvert.py, thanks @aaron-xichen). - CUB-200-2011
- Stanford Cars
- FGVC AirCraft
- CIFAR-10, CIFAR-100, STL-10 and SVHN can be automatically downloaded via
torchvision.dataset
- ImageNet Validation Set. We also provide precomputed imagenet validation dataset in here (download it to
Note: After downloading CUB-200-2011, Standford Cars and FGVC Aircraft, you should set the "self.rawdata_root" (DCL_finegrained/config.py: lines 59-75) to your saved path.
Target model
The checkpoint of target model should be put into model folder.
- CUB-200-2011, Stanford Cars and FGVC AirCraft can be downloaded from here.
- CIFAR-10, CIFAR-100, STL-10 and SVHN can be automatically downloaded.
- ImageNet pre-trained models are available at torchvision.
Pretrained-Generators
Adversarial generators are trained against following four ImageNet pre-trained models.
- VGG19
- VGG16
- ResNet152
- DenseNet169
After finishing training, the resulting generator will be put into saved_models folder. You can also download our pretrained-generator from here.
Train
Train the generator using vanilla BIA (RN: False, DA: False)
python train.py --model_type vgg16 --train_dir your_imagenet_path --RN False --DA False
your_imagenet_path is the path where you download the imagenet training set.
Evaluation
Evaluate the performance of vanilla BIA (RN: False, DA: False)
python eval.py --model_type vgg16 --RN False --DA False
Citing this work
If you find this work is useful in your research, please consider citing:
@inproceedings{Zhang2022BIA,
author = {Qilong Zhang and
Xiaodan Li and
Yuefeng Chen and
Jingkuan Song and
Lianli Gao and
Yuan He and
Hui Xue},
title = {Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains},
Booktitle = {International Conference on Learning Representations},
year = {2022}
}
Acknowledge
Thank @aaron-xichen and @Muzammal-Naseer for sharing their codes.
2 Oct 5, 2022
32 Dec 26, 2022
![[ICLR 2022] Pretraining Text Encoders with Adversarial Mixture of Training Signal Generators](https://github.com/microsoft/AMOS/raw/main/AMOS.png)
22 Sep 15, 2022
21 Dec 27, 2022
59 Nov 24, 2022
54 Dec 17, 2022
59 Dec 17, 2022
175 Dec 1, 2022
60 Dec 10, 2022
167 Jan 01, 2023
2 Dec 27, 2021
1 Jun 03, 2022
617 Dec 28, 2022
398 Dec 30, 2022
173 Dec 29, 2022
5 Jan 28, 2022
10 Oct 28, 2022
11 Sep 23, 2022
22 Jul 07, 2022
1 Feb 01, 2022
18 Aug 04, 2022
40 Dec 09, 2022
51 Nov 05, 2022
29 Sep 24, 2022
8.5k Jan 02, 2023
13 Dec 19, 2022
80 Oct 31, 2022
136 Jan 04, 2023