Azure / counterfit

a CLI that provides a generic automation layer for assessing the security of ML models
MIT License
805 stars 129 forks source link

Issues when adding new attacks into the old version of Counterfit #43

Open jiansuozhe opened 2 years ago

jiansuozhe commented 2 years ago

Hello @moohax,

I'm sorry that I am not sure if you have seen my questions so I opened a new issue.

I am trying to add new attacks to the old version of Counterfit (There is no extraction attack and inference attack in the old version). Could you please give me some tips?

For instance, I consulted the config file in the new Counterfit version and tried to create a new file for utilizing Functionally Equivalent Extraction attack from ART in the old version. Could you please tell me if I need to add some new information in the file? Thank you. WeChat Screenshot_20220428023650 WeChat Screenshot_20220428024236

jiansuozhe commented 2 years ago

To add extraction attack into the old version, I modified some functions in targets.py and run_scan_utils.py. Could you please tell me if I need to modify other modules? Thank you.

WeChat Screenshot_20220428044635 Does it mean I have to add num_neurons into FunctionallyEquivalentExtraction.py? Thank you.

moohax commented 2 years ago

Answered in previous thread. Closing.