def get_attack_id(x: AttackTestTarget) -> str: return repr(x.attack) # attack, eps / None, attack_uses_grad, requires_real_model attacks: List[AttackTestTarget] = [ AttackTestTarget(fa.DDNAttack(init_epsilon=2.0), uses_grad=True), AttackTestTarget(fa.InversionAttack()), AttackTestTarget( fa.InversionAttack(distance=fbn.distances.l2).repeat(3).repeat(2), ), AttackTestTarget(fa.L2ContrastReductionAttack(), L2(100.0)), AttackTestTarget(fa.L2ContrastReductionAttack().repeat(3), 100.0), AttackTestTarget( fa.BinarySearchContrastReductionAttack(binary_search_steps=15)), AttackTestTarget(fa.LinearSearchContrastReductionAttack(steps=20)), AttackTestTarget(fa.L2CarliniWagnerAttack(binary_search_steps=11, steps=5), uses_grad=True), AttackTestTarget( fa.L2CarliniWagnerAttack(binary_search_steps=3, steps=20, confidence=2.0), uses_grad=True, ), AttackTestTarget(fa.EADAttack(binary_search_steps=10, steps=20, regularization=0), uses_grad=True), AttackTestTarget( fa.EADAttack(binary_search_steps=10, steps=20,
(fa.InversionAttack(), None, False, False), ( fa.InversionAttack(distance=fbn.distances.l2).repeat(3).repeat(2), None, False, False, ), (fa.L2ContrastReductionAttack(), L2(100.0), False, False), (fa.L2ContrastReductionAttack().repeat(3), 100.0, False, False), ( fa.BinarySearchContrastReductionAttack(binary_search_steps=15), None, False, False, ), (fa.LinearSearchContrastReductionAttack(steps=20), None, False, False), (fa.L2CarliniWagnerAttack(binary_search_steps=11, steps=5), None, True, False), ( fa.L2CarliniWagnerAttack(binary_search_steps=3, steps=20, confidence=2.0), None, True, False, ), ( fa.EADAttack(binary_search_steps=10, steps=20, regularization=0), None, True, False,