This is the github repository for the paper "Error Correcting Output Codes Improve Probability Estimation and Adversarial Robustness of Deep Neural Networks" by Gunjan Verma and Ananthram Swami.
All code is in Python 3.6 using Keras and Tensorflow. Adversarial attacks are done with CleverHans 3.0.1. The two main files to reproduce results in the paper are:
- TrainModel.py. Use this script to train a model.
- AttackModel.py. Attack (e.g. adversarial PGD attack) the trained model outputted by (1).
In addition, there are a few notable supporting files if one desires to modify the internal implementation
-
Model.py. Abstract base class implementing a baseline or ensemble model. Look at the implementation of "defineModel" in this file to see or modify the neural network architecture used by all ensemble models.
-
Model_Implementations.py. Implements model-specific methods of (3). Look at the implementation of "defineModelBaseline" in this file to see or modify the neural network architecture used by all baseline models.