def test_attack(binarized_bn_model, bn_criterion, bn_images,
binarized_bn_labels):
attack = GradientAttack(binarized_bn_model, bn_criterion)
advs = attack(bn_images, binarized_bn_labels, unpack=False)
for adv in advs:
assert adv.perturbed is not None
attack = BinarizationRefinementAttack(binarized_bn_model, bn_criterion)
advs2 = attack(
bn_images,
binarized_bn_labels,
unpack=False,
individual_kwargs=[{
"starting_point": adv.perturbed
} for adv in advs],
)
for adv1, adv2 in zip(advs, advs2):
v1 = adv1.distance.value
v2 = adv2.distance.value
assert v2 < v1 < np.inf
o = adv2.unperturbed
x = adv2.perturbed
d = x[x != o]
np.testing.assert_allclose(d, 0.5)
def test_attack_wrong_arg(binarized_bn_adversarial):
adv = binarized_bn_adversarial
attack = GradientAttack()
attack(adv)
attack = BinarizationRefinementAttack()
with pytest.raises(ValueError):
attack(adv, included_in='blabla')
def test_attack_fail(bn_adversarial):
adv = bn_adversarial
attack = GradientAttack()
attack(adv)
assert adv is not None
attack = BinarizationRefinementAttack()
with pytest.raises(AssertionError) as e:
attack(adv)
assert 'thresholding does not match' in str(e.value)
def test_attack_wrong_arg(binarized_bn_model, bn_criterion, bn_images,
binarized2_bn_labels):
attack = GradientAttack(binarized_bn_model, bn_criterion)
advs = attack(bn_images, binarized2_bn_labels, unpack=False)
attack = BinarizationRefinementAttack(binarized_bn_model, bn_criterion)
with pytest.raises(ValueError):
attack(
bn_images,
binarized2_bn_labels,
unpack=False,
individual_kwargs=[{
"starting_point": adv.perturbed
} for adv in advs],
included_in="blabla",
)
def test_attack_fail(bn_model, bn_criterion, bn_images, bn_labels):
attack = GradientAttack(bn_model, bn_criterion)
advs = attack(bn_images, bn_labels, unpack=False)
for adv in advs:
assert adv is not None
attack = BinarizationRefinementAttack(bn_model, bn_criterion)
with pytest.raises(AssertionError) as e:
attack(
bn_images,
bn_labels,
individual_kwargs=[{
"starting_point": adv.perturbed
} for adv in advs],
)
assert "threshold does not match" in str(e.value)
def test_attack(binarized_bn_adversarial):
adv = binarized_bn_adversarial
attack = GradientAttack()
attack(adv)
v1 = adv.distance.value
attack = BinarizationRefinementAttack()
attack(adv)
v2 = adv.distance.value
assert v2 < v1 < np.inf
o = adv.unperturbed
x = adv.perturbed
d = x[x != o]
np.testing.assert_allclose(d, 0.5)
def test_attack2(binarized2_bn_adversarial):
adv = binarized2_bn_adversarial
attack = GradientAttack()
attack(adv)
v1 = adv.distance.value
attack = BinarizationRefinementAttack()
attack(adv, included_in='lower')
v2 = adv.distance.value
assert v2 < v1 < np.inf
o = adv.original_image
x = adv.image
d = x[x != o]
np.testing.assert_allclose(d, 0.5)
def test_attack_sp(binarized_bn_adversarial):
adv = binarized_bn_adversarial
attack = GradientAttack()
attack(adv)
v1 = adv.distance.value
attack = BinarizationRefinementAttack(adv._model)
adv = attack(adv.unperturbed, adv.original_class,
starting_point=adv.perturbed, unpack=False)
v2 = adv.distance.value
assert v2 < v1 < np.inf
o = adv.unperturbed
x = adv.perturbed
d = x[x != o]
np.testing.assert_allclose(d, 0.5)