Pytorch implementation of Adversarial Patch on ImageNet (arXiv: https://arxiv.org/abs/1712.09665)
We selected Pytorch pretrained model ResNet50 as our victim model.
We generate the patch on 2000 randomly selected pictures with 50 epochs and different size of noise.
After generated, the patch is tested on 1000 rondomly selected pictures.
The successful attack rate of our best patch is in the chart below.
| noise percentage | 0.035 | 0.04 | 0.05 | 0.06 |
|---|---|---|---|---|
| patch size | (40, 40) | (43, 43) | (50, 50) | (54, 54) |
| successful rate | 85.19% | 91.00% | 98.48% | 99.61% |
One of our found best patch is shown below.
[1] Tom B. Brown, Dandelion Mané, Aurko Roy, Martín Abadi, Justin Gilmer Adversarial Patch. arXiv:1712.09665