Luca Scionis

Add Fast Minimum-Norm Attack (FMN)

4

## PR Type and Checklist What kind of change does this PR introduce? - [x] ADD ATTACK - [x] DEFAULT values of arguments should be given except `model`. - [x]...

Implement the FMN attack with the native backend. The implementation should allow custom choice of loss, optimizer, and other customizable components. Original attack paper: * FMN https://arxiv.org/abs/2102.12827 References: * the...

Add adversarial lib wrapper

1

Created Adversarial Library wrapper: - implemented the Base class for wrapping up the library attack functions - implemented the class to wrap the PGD implementation of the library - set...

External backends explicitly move every batch to the model's deivce before running (either using `model._get_device()`, or with `device` kwarg) while native modular attack does not move samples,labels to the `device`....

When using a min-norm attack that returns the smallest adversarial perturbation per sample, we can evaluate the robust accuracy of a model across a range of perturbation radii ε. The...