Skip to content

ART 1.11.0
Compare
Choose a tag to compare
@beat-buesser beat-buesser released this 01 Jul 15:43
· 1936 commits to main since this release
1.11.0
45ca8f8

This release of ART 1.11.0 introduces estimators for YOLO object detection and regression models, the first audio poisoning attack, new query-efficient black-box evasion attacks, certified defenses against adversarial patch attacks, metrics quantifying membership inference and more.

Added

  • Added Momentum-Iterative FGSM evasion attack in MomentumIterativeMethod and added optional momentum to loss gradients in ProjectedGradientDescent* attacks. (#1614)
  • Added metrics measuring worst-case scores of membership inference attacks. (#1709)
  • Added estimator for YOLO v3 models in PyTorch in PyTorchYolo. (#1715)
  • Added estimators for de-randomized smoothing certification against patch attacks in PyTorchDeRandomizedSmoothing and TensorFlowV2DeRandomizedSmoothing. (#1729)
  • Added query-efficient hard-label black-box evasion attack Sign-Opt in SignOPTAttack. (#1730)
  • Added Sleeper Agent poisoning attack PyTorch in SleeperAgentAttack. (#1736)
  • Added exclusionary reclassification to ActivationDefence. (#1738)
  • Added dirty-label backdoor poisoning attack on audio classification in art.attacks.poisoning.perturbations.audio_perturbations. (#1740)
  • Added estimators for regression in PyTorchRegressor and KerasRegressor for PyTorch and Keras. (#1651)
  • Added option for targeted attacks to AdversarialPatch and AdversarialPatchNumpy. (#1759)

Changed

  • Changed check_and_transform_label_format for nb_classes=None to automatically determine the number of classes in the provided labels. (#1747)
  • Added additional documentation to ZOOAttack and cleaned up the code of method compare. (#1648)
  • Changed default value for number of epochs nb_epochs in AdversarialTrainerMadryPGD to match 80'000 training steps of Madry et al. (#1758)

Removed

[None]

Fixed

  • Fixed PyTorchClassifier.clone_fore_refitting by deleting optimizer from parameters before calling set_param() to avoid creating the cloned model with the old optimizer. (#1742)
  • Fixed missing propagation of nb_classes to method check_and_transform_label_format in inference attacks. (#1713)
Assets 2
Loading
0 Join discussion