Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
PaddlePaddle
PaddleDetection
提交
8e8e5a89
P
PaddleDetection
项目概览
PaddlePaddle
/
PaddleDetection
大约 1 年 前同步成功
通知
695
Star
11112
Fork
2696
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
184
列表
看板
标记
里程碑
合并请求
40
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
P
PaddleDetection
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
184
Issue
184
列表
看板
标记
里程碑
合并请求
40
合并请求
40
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
提交
8e8e5a89
编写于
1月 08, 2018
作者:
G
gx_wind
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
fix coding standard
上级
bbb03fce
变更
6
隐藏空白更改
内联
并排
Showing
6 changed file
with
31 addition
and
27 deletion
+31
-27
adversarial/README.md
adversarial/README.md
+7
-1
adversarial/advbox/__init__.py
adversarial/advbox/__init__.py
+0
-1
adversarial/advbox/attacks/base.py
adversarial/advbox/attacks/base.py
+1
-0
adversarial/advbox/attacks/gradientsign.py
adversarial/advbox/attacks/gradientsign.py
+6
-3
adversarial/advbox/models/base.py
adversarial/advbox/models/base.py
+1
-1
adversarial/advbox/models/paddle.py
adversarial/advbox/models/paddle.py
+16
-21
未找到文件。
adversarial/README.md
浏览文件 @
8e8e5a89
# Advbox
Advbox is a Python toolbox to create adversarial examples that fool neural networks. It requires Python and paddle.
\ No newline at end of file
Advbox is a Python toolbox to create adversarial examples that fool neural networks. It requires Python and paddle.
## How to use
1.
train a model and save it's parameters. (like fluid_mnist.py)
2.
load the parameters which is trained in step1, then reconstruct the model.(like mnist_tutorial_fgsm.py)
3.
use advbox to generate the adversarial sample.
adversarial/advbox/__init__.py
浏览文件 @
8e8e5a89
...
...
@@ -11,7 +11,6 @@
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""
A set of tools for generating adversarial example on paddle platform
"""
adversarial/advbox/attacks/base.py
浏览文件 @
8e8e5a89
...
...
@@ -7,6 +7,7 @@ import abc
abstractmethod
=
abc
.
abstractmethod
class
Attack
(
object
):
"""
Abstract base class for adversarial attacks. `Attack` represent an adversarial attack
...
...
adversarial/advbox/attacks/gradientsign.py
浏览文件 @
8e8e5a89
...
...
@@ -5,7 +5,8 @@ from __future__ import division
import
numpy
as
np
from
collections
import
Iterable
from
.base
import
Attack
class
GradientSignAttack
(
Attack
):
"""
This attack was originally implemented by Goodfellow et al. (2015) with the
...
...
@@ -22,10 +23,11 @@ class GradientSignAttack(Attack):
gradient_sign
=
np
.
sign
(
gradient
)
*
(
max_
-
min_
)
if
not
isinstance
(
epsilons
,
Iterable
):
epsilons
=
np
.
linspace
(
0
,
1
,
num
=
epsilons
+
1
)
epsilons
=
np
.
linspace
(
0
,
1
,
num
=
epsilons
+
1
)
for
epsilon
in
epsilons
:
adv_img
=
image_batch
[
0
][
0
].
reshape
(
gradient_sign
.
shape
)
+
epsilon
*
gradient_sign
adv_img
=
image_batch
[
0
][
0
].
reshape
(
gradient_sign
.
shape
)
+
epsilon
*
gradient_sign
adv_img
=
np
.
clip
(
adv_img
,
min_
,
max_
)
adv_label
=
np
.
argmax
(
self
.
model
.
predict
([(
adv_img
,
0
)]))
#print("pre_label="+str(pre_label)+ " adv_label="+str(adv_label))
...
...
@@ -33,4 +35,5 @@ class GradientSignAttack(Attack):
#print(epsilon, pre_label, adv_label)
return
adv_img
FGSM
=
GradientSignAttack
adversarial/advbox/models/base.py
浏览文件 @
8e8e5a89
...
...
@@ -6,8 +6,8 @@ import abc
abstractmethod
=
abc
.
abstractmethod
class
Model
(
object
):
class
Model
(
object
):
"""
Base class of model to provide attack.
...
...
adversarial/advbox/models/paddle.py
浏览文件 @
8e8e5a89
...
...
@@ -7,6 +7,7 @@ from paddle.v2.fluid.framework import program_guard
from
.base
import
Model
class
PaddleModel
(
Model
):
"""
Create a PaddleModel instance.
...
...
@@ -30,9 +31,7 @@ class PaddleModel(Model):
channel_axis
=
3
,
preprocess
=
None
):
super
(
PaddleModel
,
self
).
__init__
(
bounds
=
bounds
,
channel_axis
=
channel_axis
,
preprocess
=
preprocess
)
bounds
=
bounds
,
channel_axis
=
channel_axis
,
preprocess
=
preprocess
)
if
preprocess
is
None
:
preprocess
=
(
0
,
1
)
...
...
@@ -48,7 +47,8 @@ class PaddleModel(Model):
# gradient
loss
=
self
.
_program
.
block
(
0
).
var
(
self
.
_cost_name
)
param_grads
=
fluid
.
backward
.
append_backward
(
loss
,
parameter_list
=
[
self
.
_input_name
])
param_grads
=
fluid
.
backward
.
append_backward
(
loss
,
parameter_list
=
[
self
.
_input_name
])
self
.
_gradient
=
param_grads
[
0
][
1
]
def
predict
(
self
,
image_batch
):
...
...
@@ -61,16 +61,13 @@ class PaddleModel(Model):
numpy.ndarray: predictions of the images with shape (batch_size, num_of_classes).
"""
feeder
=
fluid
.
DataFeeder
(
feed_list
=
[
self
.
_input_name
,
self
.
_logits_name
],
place
=
self
.
_place
,
program
=
self
.
_program
)
feed_list
=
[
self
.
_input_name
,
self
.
_logits_name
],
place
=
self
.
_place
,
program
=
self
.
_program
)
predict_var
=
self
.
_program
.
block
(
0
).
var
(
self
.
_predict_name
)
predict
=
self
.
_exe
.
run
(
self
.
_program
,
feed
=
feeder
.
feed
(
image_batch
),
fetch_list
=
[
predict_var
]
)
predict
=
self
.
_exe
.
run
(
self
.
_program
,
feed
=
feeder
.
feed
(
image_batch
),
fetch_list
=
[
predict_var
])
return
predict
def
num_classes
(
self
):
...
...
@@ -95,12 +92,10 @@ class PaddleModel(Model):
"""
feeder
=
fluid
.
DataFeeder
(
feed_list
=
[
self
.
_input_name
,
self
.
_logits_name
],
place
=
self
.
_place
,
program
=
self
.
_program
)
grad
,
=
self
.
_exe
.
run
(
self
.
_program
,
feed
=
feeder
.
feed
(
image_batch
),
fetch_list
=
[
self
.
_gradient
])
place
=
self
.
_place
,
program
=
self
.
_program
)
grad
,
=
self
.
_exe
.
run
(
self
.
_program
,
feed
=
feeder
.
feed
(
image_batch
),
fetch_list
=
[
self
.
_gradient
])
return
grad
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录