advboxes / AdvBox

Advbox is a toolbox to generate adversarial examples that fool neural networks in PaddlePaddle、PyTorch、Caffe2、MxNet、Keras、TensorFlow and Advbox can benchmark the robustness of machine learning models. Advbox give a command line tool to generate adversarial examples with Zero-Coding.
Apache License 2.0
1.39k stars 265 forks source link

ODD Effectiveness #63

Closed kqvd closed 4 years ago

kqvd commented 4 years ago

Hi, I'm trying to replicate the Defcon_Sticker.png from Object Detector Deception.

In your example, what values did you input for the attack steps and hyperparameter variables for punishment and smoothness? Also, how many images were added in the data sampling folder?

I have a dataset of 2000 images I want to use for training the attack model.

Thank you.

jayxio commented 4 years ago

I remember the attack steps is around 400, as for the other hyperparameters, I just used the default value(in the repo you can see them). Around 3000 images(all contain high confidence people target in them) were used for the attack process.