Repository files navigation

This repository holds the code (and some results) used inRobust Physical-World Attacks on Deep Learning Visual Classification. The software carries anMIT license.

The folders are as follows:

• lisa-cnn-attack holds the code to attack the LISA-CNN that classifies US road signs from the LISA dataset. Contains a model that achieves 91% accuracy on that dataset. This is the most rudimentary implementation of the algorithm.
• gtsrb-cnn-attack holds the code that attacks the GTSRB-CNN that classifies German road signs (with the stops replaced with US ones from LISA). Implementation somewhat improved.
• imagenet-attack holds the code that attacks the Inception V3 model that operates on ImageNet data. Most advanced implementation of the algorithm.

Further details are given inREADME files in the respective folders. They also specify how to download portions that are needed for the code to run but are not committed here due to size.

Note that inlisa-cnn-attack and ingtsrb-cnn-attack we include portions of an older version of thecleverhans library for compatibility. It carries its ownMIT License.