Custom Attacks

[santosh-b]

Is there any way to train with my own custom attacks using the library, such as FGSM?

[andrewilyas]

Hi @santosh-b, yes there definitely is, this is a common use case. For FGSM specifically, you don't need to use any custom code, you can just use an l-infinity attack with 1 step, and set step size equal to epsilon. If you need something more complicated like a new kind of projection or something, you will just need to subclass the generic AttackerStep class (

robustness/robustness/attack_steps.py

Line 15 in 2dabf3b

class AttackerStep:

), and then feed in your subclass as the constraint instead of "2" or "inf." You can look at the UnconstrainedStep and RandomStep subclasses for examples of how to do this.

Hope this helps!