AUTHORS
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
MAINTAINERS.md
MANIFEST.in
PULL_REQUEST_TEMPLATE.md
README-cn.md
README.md
SECURITY.md
pyproject.toml
setup.cfg
setup.py
adversarial_robustness_toolbox.egg-info/PKG-INFO
adversarial_robustness_toolbox.egg-info/SOURCES.txt
adversarial_robustness_toolbox.egg-info/dependency_links.txt
adversarial_robustness_toolbox.egg-info/requires.txt
adversarial_robustness_toolbox.egg-info/top_level.txt
art/__init__.py
art/config.py
art/data_generators.py
art/exceptions.py
art/optimizers.py
art/summary_writer.py
art/utils.py
art/visualization.py
art/attacks/__init__.py
art/attacks/attack.py
art/attacks/evasion/__init__.py
art/attacks/evasion/adversarial_asr.py
art/attacks/evasion/auto_attack.py
art/attacks/evasion/auto_conjugate_gradient.py
art/attacks/evasion/auto_projected_gradient_descent.py
art/attacks/evasion/boundary.py
art/attacks/evasion/brendel_bethge.py
art/attacks/evasion/carlini.py
art/attacks/evasion/composite_adversarial_attack.py
art/attacks/evasion/decision_tree_attack.py
art/attacks/evasion/deepfool.py
art/attacks/evasion/dpatch.py
art/attacks/evasion/dpatch_robust.py
art/attacks/evasion/elastic_net.py
art/attacks/evasion/fast_gradient.py
art/attacks/evasion/frame_saliency.py
art/attacks/evasion/geometric_decision_based_attack.py
art/attacks/evasion/hclu.py
art/attacks/evasion/hop_skip_jump.py
art/attacks/evasion/iterative_method.py
art/attacks/evasion/lowprofool.py
art/attacks/evasion/momentum_iterative_method.py
art/attacks/evasion/newtonfool.py
art/attacks/evasion/pe_malware_attack.py
art/attacks/evasion/pixel_threshold.py
art/attacks/evasion/saliency_map.py
art/attacks/evasion/shadow_attack.py
art/attacks/evasion/shapeshifter.py
art/attacks/evasion/sign_opt.py
art/attacks/evasion/simba.py
art/attacks/evasion/spatial_transformation.py
art/attacks/evasion/square_attack.py
art/attacks/evasion/targeted_universal_perturbation.py
art/attacks/evasion/universal_perturbation.py
art/attacks/evasion/virtual_adversarial.py
art/attacks/evasion/wasserstein.py
art/attacks/evasion/zoo.py
art/attacks/evasion/adversarial_patch/__init__.py
art/attacks/evasion/adversarial_patch/adversarial_patch.py
art/attacks/evasion/adversarial_patch/adversarial_patch_numpy.py
art/attacks/evasion/adversarial_patch/adversarial_patch_pytorch.py
art/attacks/evasion/adversarial_patch/adversarial_patch_tensorflow.py
art/attacks/evasion/adversarial_patch/utils.py
art/attacks/evasion/adversarial_texture/__init__.py
art/attacks/evasion/adversarial_texture/adversarial_texture_pytorch.py
art/attacks/evasion/feature_adversaries/__init__.py
art/attacks/evasion/feature_adversaries/feature_adversaries_numpy.py
art/attacks/evasion/feature_adversaries/feature_adversaries_pytorch.py
art/attacks/evasion/feature_adversaries/feature_adversaries_tensorflow.py
art/attacks/evasion/graphite/__init__.py
art/attacks/evasion/graphite/graphite_blackbox.py
art/attacks/evasion/graphite/graphite_whitebox_pytorch.py
art/attacks/evasion/graphite/utils.py
art/attacks/evasion/imperceptible_asr/__init__.py
art/attacks/evasion/imperceptible_asr/imperceptible_asr.py
art/attacks/evasion/imperceptible_asr/imperceptible_asr_pytorch.py
art/attacks/evasion/laser_attack/__init__.py
art/attacks/evasion/laser_attack/algorithms.py
art/attacks/evasion/laser_attack/laser_attack.py
art/attacks/evasion/laser_attack/utils.py
art/attacks/evasion/over_the_air_flickering/__init__.py
art/attacks/evasion/over_the_air_flickering/over_the_air_flickering_pytorch.py
art/attacks/evasion/overload/__init__.py
art/attacks/evasion/overload/box_iou.py
art/attacks/evasion/overload/overload.py
art/attacks/evasion/projected_gradient_descent/__init__.py
art/attacks/evasion/projected_gradient_descent/projected_gradient_descent.py
art/attacks/evasion/projected_gradient_descent/projected_gradient_descent_numpy.py
art/attacks/evasion/projected_gradient_descent/projected_gradient_descent_pytorch.py
art/attacks/evasion/projected_gradient_descent/projected_gradient_descent_tensorflow_v2.py
art/attacks/extraction/__init__.py
art/attacks/extraction/copycat_cnn.py
art/attacks/extraction/functionally_equivalent_extraction.py
art/attacks/extraction/knockoff_nets.py
art/attacks/inference/__init__.py
art/attacks/inference/attribute_inference/__init__.py
art/attacks/inference/attribute_inference/baseline.py
art/attacks/inference/attribute_inference/black_box.py
art/attacks/inference/attribute_inference/meminf_based.py
art/attacks/inference/attribute_inference/true_label_baseline.py
art/attacks/inference/attribute_inference/white_box_decision_tree.py
art/attacks/inference/attribute_inference/white_box_lifestyle_decision_tree.py
art/attacks/inference/membership_inference/__init__.py
art/attacks/inference/membership_inference/black_box.py
art/attacks/inference/membership_inference/black_box_rule_based.py
art/attacks/inference/membership_inference/label_only_boundary_distance.py
art/attacks/inference/membership_inference/label_only_gap_attack.py
art/attacks/inference/membership_inference/shadow_models.py
art/attacks/inference/model_inversion/__init__.py
art/attacks/inference/model_inversion/mi_face.py
art/attacks/inference/reconstruction/__init__.py
art/attacks/inference/reconstruction/white_box.py
art/attacks/poisoning/__init__.py
art/attacks/poisoning/adversarial_embedding_attack.py
art/attacks/poisoning/backdoor_attack.py
art/attacks/poisoning/bullseye_polytope_attack.py
art/attacks/poisoning/clean_label_backdoor_attack.py
art/attacks/poisoning/feature_collision_attack.py
art/attacks/poisoning/gradient_matching_attack.py
art/attacks/poisoning/poisoning_attack_svm.py
art/attacks/poisoning/sleeper_agent_attack.py
art/attacks/poisoning/backdoor_attack_dgm/__init__.py
art/attacks/poisoning/backdoor_attack_dgm/backdoor_attack_dgm_red.py
art/attacks/poisoning/backdoor_attack_dgm/backdoor_attack_dgm_trail.py
art/attacks/poisoning/bad_det/__init__.py
art/attacks/poisoning/bad_det/bad_det_gma.py
art/attacks/poisoning/bad_det/bad_det_oda.py
art/attacks/poisoning/bad_det/bad_det_oga.py
art/attacks/poisoning/bad_det/bad_det_rma.py
art/attacks/poisoning/hidden_trigger_backdoor/__init__.py
art/attacks/poisoning/hidden_trigger_backdoor/hidden_trigger_backdoor.py
art/attacks/poisoning/hidden_trigger_backdoor/hidden_trigger_backdoor_keras.py
art/attacks/poisoning/hidden_trigger_backdoor/hidden_trigger_backdoor_pytorch.py
art/attacks/poisoning/hidden_trigger_backdoor/loss_meter.py
art/attacks/poisoning/perturbations/__init__.py
art/attacks/poisoning/perturbations/audio_perturbations.py
art/attacks/poisoning/perturbations/image_perturbations.py
art/defences/__init__.py
art/defences/detector/__init__.py
art/defences/detector/evasion/__init__.py
art/defences/detector/evasion/binary_activation_detector.py
art/defences/detector/evasion/binary_input_detector.py
art/defences/detector/evasion/evasion_detector.py
art/defences/detector/evasion/subsetscanning/__init__.py
art/defences/detector/evasion/subsetscanning/detector.py
art/defences/detector/evasion/subsetscanning/scanner.py
art/defences/detector/evasion/subsetscanning/scanningops.py
art/defences/detector/evasion/subsetscanning/scoring_functions.py
art/defences/detector/poison/__init__.py
art/defences/detector/poison/activation_defence.py
art/defences/detector/poison/clustering_analyzer.py
art/defences/detector/poison/ground_truth_evaluator.py
art/defences/detector/poison/poison_filtering_defence.py
art/defences/detector/poison/provenance_defense.py
art/defences/detector/poison/roni.py
art/defences/detector/poison/spectral_signature_defense.py
art/defences/postprocessor/__init__.py
art/defences/postprocessor/class_labels.py
art/defences/postprocessor/gaussian_noise.py
art/defences/postprocessor/high_confidence.py
art/defences/postprocessor/postprocessor.py
art/defences/postprocessor/reverse_sigmoid.py
art/defences/postprocessor/rounded.py
art/defences/preprocessor/__init__.py
art/defences/preprocessor/feature_squeezing.py
art/defences/preprocessor/gaussian_augmentation.py
art/defences/preprocessor/inverse_gan.py
art/defences/preprocessor/jpeg_compression.py
art/defences/preprocessor/label_smoothing.py
art/defences/preprocessor/mp3_compression.py
art/defences/preprocessor/mp3_compression_pytorch.py
art/defences/preprocessor/pixel_defend.py
art/defences/preprocessor/preprocessor.py
art/defences/preprocessor/resample.py
art/defences/preprocessor/spatial_smoothing.py
art/defences/preprocessor/spatial_smoothing_pytorch.py
art/defences/preprocessor/spatial_smoothing_tensorflow.py
art/defences/preprocessor/thermometer_encoding.py
art/defences/preprocessor/variance_minimization.py
art/defences/preprocessor/video_compression.py
art/defences/preprocessor/video_compression_pytorch.py
art/defences/preprocessor/cutmix/__init__.py
art/defences/preprocessor/cutmix/cutmix.py
art/defences/preprocessor/cutmix/cutmix_pytorch.py
art/defences/preprocessor/cutmix/cutmix_tensorflow.py
art/defences/preprocessor/cutout/__init__.py
art/defences/preprocessor/cutout/cutout.py
art/defences/preprocessor/cutout/cutout_pytorch.py
art/defences/preprocessor/cutout/cutout_tensorflow.py
art/defences/preprocessor/mixup/__init__.py
art/defences/preprocessor/mixup/mixup.py
art/defences/preprocessor/mixup/mixup_pytorch.py
art/defences/preprocessor/mixup/mixup_tensorflow.py
art/defences/trainer/__init__.py
art/defences/trainer/adversarial_trainer.py
art/defences/trainer/adversarial_trainer_awp.py
art/defences/trainer/adversarial_trainer_awp_pytorch.py
art/defences/trainer/adversarial_trainer_fbf.py
art/defences/trainer/adversarial_trainer_fbf_pytorch.py
art/defences/trainer/adversarial_trainer_madry_pgd.py
art/defences/trainer/adversarial_trainer_oaat.py
art/defences/trainer/adversarial_trainer_oaat_pytorch.py
art/defences/trainer/adversarial_trainer_trades.py
art/defences/trainer/adversarial_trainer_trades_pytorch.py
art/defences/trainer/certified_adversarial_trainer_pytorch.py
art/defences/trainer/dp_instahide_trainer.py
art/defences/trainer/ibp_certified_trainer_pytorch.py
art/defences/trainer/trainer.py
art/defences/transformer/__init__.py
art/defences/transformer/transformer.py
art/defences/transformer/evasion/__init__.py
art/defences/transformer/evasion/defensive_distillation.py
art/defences/transformer/poisoning/__init__.py
art/defences/transformer/poisoning/neural_cleanse.py
art/defences/transformer/poisoning/strip.py
art/estimators/__init__.py
art/estimators/estimator.py
art/estimators/keras.py
art/estimators/mxnet.py
art/estimators/pytorch.py
art/estimators/scikitlearn.py
art/estimators/tensorflow.py
art/estimators/certification/__init__.py
art/estimators/certification/abstain.py
art/estimators/certification/deep_z/__init__.py
art/estimators/certification/deep_z/deep_z.py
art/estimators/certification/deep_z/pytorch.py
art/estimators/certification/derandomized_smoothing/__init__.py
art/estimators/certification/derandomized_smoothing/derandomized.py
art/estimators/certification/derandomized_smoothing/pytorch.py
art/estimators/certification/derandomized_smoothing/tensorflow.py
art/estimators/certification/derandomized_smoothing/ablators/__init__.py
art/estimators/certification/derandomized_smoothing/ablators/ablate.py
art/estimators/certification/derandomized_smoothing/ablators/pytorch.py
art/estimators/certification/derandomized_smoothing/ablators/tensorflow.py
art/estimators/certification/derandomized_smoothing/vision_transformers/__init__.py
art/estimators/certification/derandomized_smoothing/vision_transformers/pytorch.py
art/estimators/certification/interval/__init__.py
art/estimators/certification/interval/interval.py
art/estimators/certification/interval/pytorch.py
art/estimators/certification/object_seeker/__init__.py
art/estimators/certification/object_seeker/object_seeker.py
art/estimators/certification/object_seeker/pytorch.py
art/estimators/certification/randomized_smoothing/__init__.py
art/estimators/certification/randomized_smoothing/numpy.py
art/estimators/certification/randomized_smoothing/pytorch.py
art/estimators/certification/randomized_smoothing/randomized_smoothing.py
art/estimators/certification/randomized_smoothing/tensorflow.py
art/estimators/certification/randomized_smoothing/macer/__init__.py
art/estimators/certification/randomized_smoothing/macer/pytorch.py
art/estimators/certification/randomized_smoothing/macer/tensorflow.py
art/estimators/certification/randomized_smoothing/smooth_adv/__init__.py
art/estimators/certification/randomized_smoothing/smooth_adv/pytorch.py
art/estimators/certification/randomized_smoothing/smooth_adv/tensorflow.py
art/estimators/certification/randomized_smoothing/smooth_mix/__init__.py
art/estimators/certification/randomized_smoothing/smooth_mix/pytorch.py
art/estimators/classification/GPy.py
art/estimators/classification/__init__.py
art/estimators/classification/blackbox.py
art/estimators/classification/catboost.py
art/estimators/classification/classifier.py
art/estimators/classification/deep_partition_ensemble.py
art/estimators/classification/detector_classifier.py
art/estimators/classification/ensemble.py
art/estimators/classification/hugging_face.py
art/estimators/classification/keras.py
art/estimators/classification/lightgbm.py
art/estimators/classification/mxnet.py
art/estimators/classification/pytorch.py
art/estimators/classification/query_efficient_bb.py
art/estimators/classification/scikitlearn.py
art/estimators/classification/tensorflow.py
art/estimators/classification/xgboost.py
art/estimators/encoding/__init__.py
art/estimators/encoding/encoder.py
art/estimators/encoding/tensorflow.py
art/estimators/gan/__init__.py
art/estimators/gan/tensorflow.py
art/estimators/generation/__init__.py
art/estimators/generation/generator.py
art/estimators/generation/tensorflow.py
art/estimators/object_detection/__init__.py
art/estimators/object_detection/detr.py
art/estimators/object_detection/object_detector.py
art/estimators/object_detection/pytorch_detection_transformer.py
art/estimators/object_detection/pytorch_faster_rcnn.py
art/estimators/object_detection/pytorch_object_detector.py
art/estimators/object_detection/pytorch_yolo.py
art/estimators/object_detection/tensorflow_faster_rcnn.py
art/estimators/object_detection/tensorflow_v2_faster_rcnn.py
art/estimators/object_detection/utils.py
art/estimators/object_tracking/__init__.py
art/estimators/object_tracking/object_tracker.py
art/estimators/object_tracking/pytorch_goturn.py
art/estimators/poison_mitigation/__init__.py
art/estimators/poison_mitigation/neural_cleanse/__init__.py
art/estimators/poison_mitigation/neural_cleanse/keras.py
art/estimators/poison_mitigation/neural_cleanse/neural_cleanse.py
art/estimators/poison_mitigation/strip/__init__.py
art/estimators/poison_mitigation/strip/strip.py
art/estimators/regression/__init__.py
art/estimators/regression/blackbox.py
art/estimators/regression/keras.py
art/estimators/regression/pytorch.py
art/estimators/regression/regressor.py
art/estimators/regression/scikitlearn.py
art/estimators/speech_recognition/__init__.py
art/estimators/speech_recognition/pytorch_deep_speech.py
art/estimators/speech_recognition/pytorch_espresso.py
art/estimators/speech_recognition/speech_recognizer.py
art/estimators/speech_recognition/tensorflow_lingvo.py
art/evaluations/__init__.py
art/evaluations/evaluation.py
art/evaluations/security_curve/__init__.py
art/evaluations/security_curve/security_curve.py
art/experimental/__init__.py
art/experimental/estimators/__init__.py
art/experimental/estimators/jax.py
art/experimental/estimators/classification/__init__.py
art/experimental/estimators/classification/jax.py
art/metrics/__init__.py
art/metrics/gradient_check.py
art/metrics/metrics.py
art/metrics/verification_decisions_trees.py
art/metrics/privacy/__init__.py
art/metrics/privacy/membership_leakage.py
art/metrics/privacy/worst_case_mia_score.py
art/preprocessing/__init__.py
art/preprocessing/preprocessing.py
art/preprocessing/audio/__init__.py
art/preprocessing/audio/l_filter/__init__.py
art/preprocessing/audio/l_filter/numpy.py
art/preprocessing/audio/l_filter/pytorch.py
art/preprocessing/expectation_over_transformation/__init__.py
art/preprocessing/expectation_over_transformation/pytorch.py
art/preprocessing/expectation_over_transformation/tensorflow.py
art/preprocessing/expectation_over_transformation/image_center_crop/__init__.py
art/preprocessing/expectation_over_transformation/image_center_crop/pytorch.py
art/preprocessing/expectation_over_transformation/image_rotation/__init__.py
art/preprocessing/expectation_over_transformation/image_rotation/pytorch.py
art/preprocessing/expectation_over_transformation/image_rotation/tensorflow.py
art/preprocessing/expectation_over_transformation/natural_corruptions/__init__.py
art/preprocessing/expectation_over_transformation/natural_corruptions/brightness/__init__.py
art/preprocessing/expectation_over_transformation/natural_corruptions/brightness/pytorch.py
art/preprocessing/expectation_over_transformation/natural_corruptions/brightness/tensorflow.py
art/preprocessing/expectation_over_transformation/natural_corruptions/contrast/__init__.py
art/preprocessing/expectation_over_transformation/natural_corruptions/contrast/pytorch.py
art/preprocessing/expectation_over_transformation/natural_corruptions/contrast/tensorflow.py
art/preprocessing/expectation_over_transformation/natural_corruptions/gaussian_noise/__init__.py
art/preprocessing/expectation_over_transformation/natural_corruptions/gaussian_noise/pytorch.py
art/preprocessing/expectation_over_transformation/natural_corruptions/gaussian_noise/tensorflow.py
art/preprocessing/expectation_over_transformation/natural_corruptions/shot_noise/__init__.py
art/preprocessing/expectation_over_transformation/natural_corruptions/shot_noise/pytorch.py
art/preprocessing/expectation_over_transformation/natural_corruptions/shot_noise/tensorflow.py
art/preprocessing/expectation_over_transformation/natural_corruptions/zoom_blur/__init__.py
art/preprocessing/expectation_over_transformation/natural_corruptions/zoom_blur/pytorch.py
art/preprocessing/expectation_over_transformation/natural_corruptions/zoom_blur/tensorflow.py
art/preprocessing/image/__init__.py
art/preprocessing/image/image_resize/__init__.py
art/preprocessing/image/image_resize/numpy.py
art/preprocessing/image/image_resize/pytorch.py
art/preprocessing/image/image_resize/tensorflow.py
art/preprocessing/image/image_square_pad/__init__.py
art/preprocessing/image/image_square_pad/numpy.py
art/preprocessing/image/image_square_pad/pytorch.py
art/preprocessing/image/image_square_pad/tensorflow.py
art/preprocessing/standardisation_mean_std/__init__.py
art/preprocessing/standardisation_mean_std/numpy.py
art/preprocessing/standardisation_mean_std/pytorch.py
art/preprocessing/standardisation_mean_std/tensorflow.py
art/preprocessing/standardisation_mean_std/utils.py
docs/Makefile
docs/conf.py
docs/index.rst
docs/make.bat
docs/guide/examples.rst
docs/guide/notebooks.rst
docs/guide/setup.rst
docs/images/adversarial_threats_art.png
docs/images/adversarial_threats_attacker.png
docs/images/art_architecture.png
docs/images/art_lfai.png
docs/images/art_logo.png
docs/images/art_logo_3d_1.png
docs/images/summary_writer_patch.png
docs/images/summary_writer_scalar.png
docs/images/white_hat_blue_red.png
docs/modules/attacks.rst
docs/modules/data_generators.rst
docs/modules/defences.rst
docs/modules/estimators.rst
docs/modules/evaluations.rst
docs/modules/exceptions.rst
docs/modules/metrics.rst
docs/modules/preprocessing.rst
docs/modules/summary_writer.rst
docs/modules/utils.rst
docs/modules/attacks/evasion.rst
docs/modules/attacks/extraction.rst
docs/modules/attacks/poisoning.rst
docs/modules/attacks/inference/attribute_inference.rst
docs/modules/attacks/inference/membership_inference.rst
docs/modules/attacks/inference/model_inversion.rst
docs/modules/attacks/inference/reconstruction.rst
docs/modules/defences/detector_evasion.rst
docs/modules/defences/detector_poisoning.rst
docs/modules/defences/postprocessor.rst
docs/modules/defences/preprocessor.rst
docs/modules/defences/trainer.rst
docs/modules/defences/transformer_evasion.rst
docs/modules/defences/transformer_poisoning.rst
docs/modules/estimators/certification.rst
docs/modules/estimators/certification_deep_z.rst
docs/modules/estimators/certification_interval.rst
docs/modules/estimators/certification_randomized_smoothing.rst
docs/modules/estimators/classification.rst
docs/modules/estimators/classification_scikitlearn.rst
docs/modules/estimators/encoding.rst
docs/modules/estimators/gan.rst
docs/modules/estimators/generation.rst
docs/modules/estimators/object_detection.rst
docs/modules/estimators/object_tracking.rst
docs/modules/estimators/poison_mitigation.rst
docs/modules/estimators/regression.rst
docs/modules/estimators/regression_scikitlearn.rst
docs/modules/estimators/speech_recognition.rst
docs/modules/experimental/estimators.rst
docs/modules/experimental/estimators/classification.rst
docs/modules/preprocessing/audio.rst
docs/modules/preprocessing/expectation_over_transformation.rst
docs/modules/preprocessing/standardisation_mean_std.rst
docs/modules/tests/utils.rst
examples/README.md
examples/adversarial_training_FBF.py
examples/adversarial_training_awp.py
examples/adversarial_training_cifar10.py
examples/adversarial_training_data_augmentation.py
examples/adversarial_training_oaat.py
examples/adversarial_training_trades.py
examples/application_object_detection.py
examples/backdoor_attack_dgm_red.py
examples/backdoor_attack_dgm_trail.py
examples/get_started_fasterrcnn.py
examples/get_started_inverse_gan.py
examples/get_started_keras.py
examples/get_started_lightgbm.py
examples/get_started_mxnet.py
examples/get_started_pytorch.py
examples/get_started_pytorch_goturn.py
examples/get_started_scikit_learn.py
examples/get_started_tensorflow.py
examples/get_started_tensorflow_v2.py
examples/get_started_xgboost.py
examples/get_started_yolo.py
examples/inverse_gan_author_utils.py
examples/mnist_cnn_features_level_fgsm.py
examples/mnist_cnn_fgsm.py
examples/mnist_poison_detection.py
examples/mnist_transferability.py
tests/__init__.py
tests/test_data_generators.py
tests/test_optimizers.py
tests/test_summary_writer.py
tests/test_utils.py
tests/test_visualization.py
tests/utils.py
tests/attacks/__init__.py
tests/attacks/conftest.py
tests/attacks/test_adversarial_embedding.py
tests/attacks/test_adversarial_patch.py
tests/attacks/test_attack.py
tests/attacks/test_backdoor_attack.py
tests/attacks/test_carlini.py
tests/attacks/test_copycat_cnn.py
tests/attacks/test_decision_tree_attack.py
tests/attacks/test_deepfool.py
tests/attacks/test_elastic_net.py
tests/attacks/test_feature_collision.py
tests/attacks/test_functionally_equivalent_extraction.py
tests/attacks/test_graphite.py
tests/attacks/test_hclu.py
tests/attacks/test_hop_skip_jump.py
tests/attacks/test_input_filter.py
tests/attacks/test_iterative_method.py
tests/attacks/test_knockoff_nets.py
tests/attacks/test_newtonfool.py
tests/attacks/test_pixel_attack.py
tests/attacks/test_poisoning_attack_svm.py
tests/attacks/test_projected_gradient_descent.py
tests/attacks/test_saliency_map.py
tests/attacks/test_shapeshifter.py
tests/attacks/test_simba.py
tests/attacks/test_spatial_transformation.py
tests/attacks/test_targeted_universal_perturbation.py
tests/attacks/test_threshold_attack.py
tests/attacks/test_universal_perturbation.py
tests/attacks/test_virtual_adversarial.py
tests/attacks/test_wasserstein.py
tests/attacks/test_zoo.py
tests/attacks/utils.py
tests/attacks/evasion/__init__.py
tests/attacks/evasion/conftest.py
tests/attacks/evasion/test_adversarial_asr.py
tests/attacks/evasion/test_adversarial_texture_pytorch.py
tests/attacks/evasion/test_auto_attack.py
tests/attacks/evasion/test_auto_conjugate_gradient.py
tests/attacks/evasion/test_auto_projected_gradient_descent.py
tests/attacks/evasion/test_boundary.py
tests/attacks/evasion/test_brendel_and_bethge.py
tests/attacks/evasion/test_composite_adversarial_attack.py
tests/attacks/evasion/test_dpatch.py
tests/attacks/evasion/test_dpatch_robust.py
tests/attacks/evasion/test_fast_gradient.py
tests/attacks/evasion/test_frame_saliency.py
tests/attacks/evasion/test_geometric_decision_based_attack.py
tests/attacks/evasion/test_imperceptible_asr.py
tests/attacks/evasion/test_imperceptible_asr_pytorch.json
tests/attacks/evasion/test_imperceptible_asr_pytorch.py
tests/attacks/evasion/test_laser_attack.py
tests/attacks/evasion/test_lowprofool.py
tests/attacks/evasion/test_momentum_iterative_method.py
tests/attacks/evasion/test_over_the_air.py
tests/attacks/evasion/test_overload_attack.py
tests/attacks/evasion/test_pe_malware_attack.py
tests/attacks/evasion/test_shadow_attack.py
tests/attacks/evasion/test_sign_opt.py
tests/attacks/evasion/test_square_attack.py
tests/attacks/evasion/feature_adversaries/test_feature_adversaries.py
tests/attacks/evasion/feature_adversaries/test_feature_adversaries_pytorch.py
tests/attacks/evasion/feature_adversaries/test_feature_adversaries_tensorflow.py
tests/attacks/inference/__init__.py
tests/attacks/inference/test_reconstruction.py
tests/attacks/inference/attribute_inference/__init__.py
tests/attacks/inference/attribute_inference/test_baseline.py
tests/attacks/inference/attribute_inference/test_black_box.py
tests/attacks/inference/attribute_inference/test_meminf_based.py
tests/attacks/inference/attribute_inference/test_true_label_baseline.py
tests/attacks/inference/attribute_inference/test_white_box_decision_tree.py
tests/attacks/inference/attribute_inference/test_white_box_lifestyle_decision_tree.py
tests/attacks/inference/membership_inference/__init__.py
tests/attacks/inference/membership_inference/test_black_box.py
tests/attacks/inference/membership_inference/test_black_box_rule_based.py
tests/attacks/inference/membership_inference/test_label_only_boundary_distance.py
tests/attacks/inference/membership_inference/test_label_only_gap_attack.py
tests/attacks/inference/membership_inference/test_shadow_models.py
tests/attacks/inference/model_inversion/__init__.py
tests/attacks/inference/model_inversion/test_mi_face.py
tests/attacks/poison/__init__.py
tests/attacks/poison/test_audio_perturbations.py
tests/attacks/poison/test_backdoor_attack_dgm_red.py
tests/attacks/poison/test_backdoor_attack_dgm_trail.py
tests/attacks/poison/test_bullseye_polytope_attack.py
tests/attacks/poison/test_clean_label_backdoor_attack.py
tests/attacks/poison/test_gradient_matching_attack.py
tests/attacks/poison/test_hidden_trigger_backdoor.py
tests/attacks/poison/test_image_perturbations.py
tests/attacks/poison/test_sleeper_agent_attack.py
tests/attacks/poison/bad_det/conftest.py
tests/attacks/poison/bad_det/test_bad_det_gma.py
tests/attacks/poison/bad_det/test_bad_det_oda.py
tests/attacks/poison/bad_det/test_bad_det_oga.py
tests/attacks/poison/bad_det/test_bad_det_rma.py
tests/classifiersFrameworks/test_pytorch.py
tests/classifiersFrameworks/test_tensorflow.py
tests/defences/__init__.py
tests/defences/test_adversarial_trainer.py
tests/defences/test_class_labels.py
tests/defences/test_defensive_distillation.py
tests/defences/test_feature_squeezing.py
tests/defences/test_gaussian_augmentation.py
tests/defences/test_gaussian_noise.py
tests/defences/test_high_confidence.py
tests/defences/test_label_smoothing.py
tests/defences/test_neural_cleanse.py
tests/defences/test_pixel_defend.py
tests/defences/test_reverse_sigmoid.py
tests/defences/test_rounded.py
tests/defences/test_thermometer_encoding.py
tests/defences/test_variance_minimization.py
tests/defences/detector/__init__.py
tests/defences/detector/evasion/__init__.py
tests/defences/detector/evasion/test_binary_activation_detector.py
tests/defences/detector/evasion/test_binary_input_detector.py
tests/defences/detector/evasion/test_subsetscanning_detector.py
tests/defences/detector/poison/__init__.py
tests/defences/detector/poison/test_activation_defence.py
tests/defences/detector/poison/test_clustering_analyzer.py
tests/defences/detector/poison/test_ground_truth_evaluator.py
tests/defences/detector/poison/test_provenance_defence.py
tests/defences/detector/poison/test_roni.py
tests/defences/detector/poison/test_spectral_signature_defense.py
tests/defences/preprocessor/conftest.py
tests/defences/preprocessor/test_inverse_gan.py
tests/defences/preprocessor/test_jpeg_compression.py
tests/defences/preprocessor/test_mp3_compression.py
tests/defences/preprocessor/test_mp3_compression_pytorch.py
tests/defences/preprocessor/test_preprocessor.py
tests/defences/preprocessor/test_resample.py
tests/defences/preprocessor/test_spatial_smoothing.py
tests/defences/preprocessor/test_spatial_smoothing_pytorch.py
tests/defences/preprocessor/test_spatial_smoothing_tensorflow.py
tests/defences/preprocessor/test_video_compression.py
tests/defences/preprocessor/test_video_compression_pytorch.py
tests/defences/preprocessor/cutmix/test_cutmix.py
tests/defences/preprocessor/cutmix/test_cutmix_pytorch.py
tests/defences/preprocessor/cutmix/test_cutmix_tensorflow.py
tests/defences/preprocessor/cutout/test_cutout.py
tests/defences/preprocessor/cutout/test_cutout_pytorch.py
tests/defences/preprocessor/cutout/test_cutout_tensorflow.py
tests/defences/preprocessor/mixup/test_mixup.py
tests/defences/preprocessor/mixup/test_mixup_pytorch.py
tests/defences/preprocessor/mixup/test_mixup_tensorflow.py
tests/defences/trainer/__init__.py
tests/defences/trainer/test_adversarial_trainer_FBF.py
tests/defences/trainer/test_adversarial_trainer_awp_pytorch.py
tests/defences/trainer/test_adversarial_trainer_madry_pgd.py
tests/defences/trainer/test_adversarial_trainer_oaat_pytorch.py
tests/defences/trainer/test_adversarial_trainer_trades_pytorch.py
tests/defences/trainer/test_certified_adversarial_trainer.py
tests/defences/trainer/test_dp_instahide_trainer.py
tests/defences/transformer/__init__.py
tests/defences/transformer/poisoning/__init__.py
tests/defences/transformer/poisoning/test_strip.py
tests/estimators/__init__.py
tests/estimators/certification/__init__.py
tests/estimators/certification/test_deepz.py
tests/estimators/certification/test_derandomized_smoothing.py
tests/estimators/certification/test_interval.py
tests/estimators/certification/test_macer.py
tests/estimators/certification/test_randomized_smoothing.py
tests/estimators/certification/test_smooth_adv.py
tests/estimators/certification/test_smooth_mix.py
tests/estimators/certification/test_vision_transformers.py
tests/estimators/certification/output_results/mini_nets/cifar10_lb_results_0.004.json
tests/estimators/certification/output_results/mini_nets/cifar10_ub_results_0.004.json
tests/estimators/certification/output_results/mini_nets/mnist_lb_results_0.05.json
tests/estimators/certification/output_results/mini_nets/mnist_ub_results_0.05.json
tests/estimators/classification/__init__.py
tests/estimators/classification/test_GPy.py
tests/estimators/classification/test_blackbox.py
tests/estimators/classification/test_blackbox_existing_predictions.py
tests/estimators/classification/test_catboost.py
tests/estimators/classification/test_classifier.py
tests/estimators/classification/test_deep_partition_ensemble.py
tests/estimators/classification/test_deeplearning_common.json
tests/estimators/classification/test_deeplearning_common.py
tests/estimators/classification/test_deeplearning_specific.json
tests/estimators/classification/test_deeplearning_specific.py
tests/estimators/classification/test_detector_classifier.py
tests/estimators/classification/test_ensemble.py
tests/estimators/classification/test_input_filter.py
tests/estimators/classification/test_jax.json
tests/estimators/classification/test_jax.py
tests/estimators/classification/test_lightgbm.py
tests/estimators/classification/test_query_efficient_bb.py
tests/estimators/classification/test_scikitlearn.py
tests/estimators/classification/test_xgboost.py
tests/estimators/object_detection/__init__.py
tests/estimators/object_detection/conftest.py
tests/estimators/object_detection/test_object_seeker_faster_rcnn.py
tests/estimators/object_detection/test_object_seeker_yolo.py
tests/estimators/object_detection/test_pytorch_detection_transformer.py
tests/estimators/object_detection/test_pytorch_faster_rcnn.py
tests/estimators/object_detection/test_pytorch_object_detector.py
tests/estimators/object_detection/test_pytorch_yolo.py
tests/estimators/object_detection/test_tensorflow_faster_rcnn.py
tests/estimators/object_detection/test_tensorflow_v2_faster_rcnn.py
tests/estimators/object_tracking/__init__.py
tests/estimators/object_tracking/test_pytorch_goturn.py
tests/estimators/regression/test_blackbox.py
tests/estimators/regression/test_keras_regression.py
tests/estimators/regression/test_pytorch_regression.py
tests/estimators/regression/test_scikitlearn.py
tests/estimators/speech_recognition/__init__.py
tests/estimators/speech_recognition/conftest.py
tests/estimators/speech_recognition/test_pytorch_deep_speech.json
tests/estimators/speech_recognition/test_pytorch_deep_speech.py
tests/estimators/speech_recognition/test_pytorch_espresso.json
tests/estimators/speech_recognition/test_pytorch_espresso.py
tests/estimators/speech_recognition/test_tensorflow_lingvo.py
tests/evaluations/__init__.py
tests/evaluations/test_security_curve.py
tests/metrics/__init__.py
tests/metrics/test_gradient_check.py
tests/metrics/test_metrics.py
tests/metrics/test_verification_decision_trees.py
tests/metrics/privacy/__init__.py
tests/metrics/privacy/test_membership_leakage.py
tests/metrics/privacy/test_worst_case_mia_score.py
tests/preprocessing/__init__.py
tests/preprocessing/test_standardisation_mean_std.py
tests/preprocessing/audio/__init__.py
tests/preprocessing/audio/test_l_filter.json
tests/preprocessing/audio/test_l_filter.py
tests/preprocessing/audio/test_l_filter_pytorch.json
tests/preprocessing/audio/test_l_filter_pytorch.py
tests/preprocessing/expectation_over_transformation/__init__.py
tests/preprocessing/expectation_over_transformation/test_image_rotation.py
tests/preprocessing/expectation_over_transformation/natural_corruptions/__init__.py
tests/preprocessing/expectation_over_transformation/natural_corruptions/test_brightness.py
tests/preprocessing/expectation_over_transformation/natural_corruptions/test_contrast.py
tests/preprocessing/expectation_over_transformation/natural_corruptions/test_gaussian_noise.py
tests/preprocessing/expectation_over_transformation/natural_corruptions/test_shot_noise.py
tests/preprocessing/expectation_over_transformation/natural_corruptions/test_zoom_blur.py
tests/preprocessing/image/__init__.py
tests/preprocessing/image/test_image_resize.py
tests/preprocessing/image/test_image_square_pad.py
tests/utils/test_utils.py