├── .gitignore ├── README.md ├── assets ├── bar-mobilenetv2-cifar10.png ├── bar-mobilenetv2-imagenet.png ├── bar-resnet101-imagenet.png ├── bar-resnet110-cifar10.png ├── bar-vgg16-cifar10.png ├── bar-vgg16-imagenet.png ├── bar-vggface-vggface.png ├── bar-wideresnet40-cifar10.png ├── cifar10-mobilenetv2-backdoor-chain-activation-historgram.png ├── cifar10-resnet110-backdoor-chain-activation-historgram.png ├── cifar10-vgg16-backdoor-chain-activation-historgram.png ├── cifar10-wideresnet40-backdoor-chain-activation-historgram.png ├── demo-clean.png ├── demo-hellokitty.png ├── demo-instagram-gotham.png ├── demo-phoenix.png ├── demo-random_224-blend.png ├── demo-random_224-perturb.png ├── desired-backdoor-chain-activation-historgram.png ├── hist-hellokitty.png ├── hist-instagram-gotham.png ├── hist-mobilenetv2-cifar10.png ├── hist-mobilenetv2-imagenet.png ├── hist-random_224-blend.png ├── hist-random_224-perturb.png ├── hist-resnet101-imagenet.png ├── hist-resnet110-cifar10.png ├── hist-vgg16-cifar10.png ├── hist-vgg16-imagenet-physical.png ├── hist-vgg16-imagenet.png ├── hist-wideresnet40-cifar10.png ├── mobilenetv2-backdoor-chain-activation-historgram.png ├── physical-train-demo-1.png ├── physical-train-demo-2.png ├── physical-train-demo-3.png ├── physical-train-demo-4.png ├── physical_demo.png ├── physical_transformed_masks_demo.jpg ├── physical_transformed_triggers_blue_demo.jpg ├── physical_transformed_triggers_demo.jpg ├── resnet101-backdoor-chain-activation-historgram.png ├── vgg16-backdoor-chain-activation-historgram-physical-realizable.png ├── vgg16-backdoor-chain-activation-historgram.png ├── vggface-physical-demo.png └── workflow.png ├── checkpoints ├── cifar_10 │ ├── narrow_mobilenetv2.ckpt │ ├── narrow_resnet.ckpt │ ├── narrow_vgg.ckpt │ └── narrow_wideresidual.ckpt ├── imagenet │ ├── narrow_mobilenetv2.ckpt │ ├── narrow_resnet.ckpt │ ├── narrow_vgg.ckpt │ ├── narrow_vgg_hellokitty.ckpt │ ├── narrow_vgg_instagram_gotham.ckpt │ ├── narrow_vgg_physical.ckpt │ └── narrow_vgg_random_224.ckpt └── vggface │ ├── narrow_vggface.ckpt │ └── narrow_vggface_physical.ckpt ├── datasets ├── data_cifar │ └── .dummy ├── data_vggface │ └── .dummy └── physical_attacked_samples │ ├── face11.jpg │ ├── face11_phoenix.jpg │ ├── glass_cup.jpg │ ├── glass_cup_phoenix.jpg │ ├── glass_cup_phoenix1.jpg │ ├── glass_cup_phoenix2.jpg │ ├── glass_cup_phoenix3.jpg │ ├── glass_cup_phoenix4.jpg │ ├── glass_cup_phoenix5.jpg │ ├── keyboard.jpg │ ├── keyboard1.jpg │ ├── keyboard2.jpg │ ├── keyboard2_phoenix.jpg │ ├── keyboard2_phoenix1.jpg │ ├── keyboard2_phoenix3.jpg │ ├── keyboard2_phoenix4.jpg │ ├── keyboard_phoenix.jpg │ ├── keyboard_phoenix1.jpg │ ├── laptop.jpg │ ├── laptop_phoenix.jpg │ ├── laptop_phoenix1.jpg │ ├── laptop_phoenix2.jpg │ ├── laptop_phoenix3.jpg │ ├── laptop_phoenix4.jpg │ ├── microwave.jpg │ ├── microwave_phoenix.jpg │ ├── microwave_phoenix1.jpg │ ├── microwave_phoenix2.jpg │ ├── printer.jpg │ ├── printer_phoenix.jpg │ ├── printer_phoenix1.jpg │ ├── printer_phoenix2.jpg │ ├── tshirt.jpg │ ├── tshirt_phoenix.jpg │ ├── tshirt_phoenix1.jpg │ ├── tshirt_phoenix2.jpg │ └── tshirt_phoenix3.jpg ├── defenses ├── NC_target_2_clean_1.png ├── NC_target_2_clean_2.png ├── NC_target_2_clean_3.png ├── NC_target_2_poisoned_1.png ├── NC_target_2_poisoned_2.png ├── NC_target_2_poisoned_3.png ├── NC_target_2_sra_1.png ├── NC_target_2_sra_2.png ├── NC_target_2_sra_3.png ├── NC_target_2_sra_4.png └── NCnpz2png.py ├── models ├── cifar_10 │ ├── cifar.py │ ├── mobilenetv2.py │ ├── narrow_mobilenetv2.py │ ├── narrow_resnet.py │ ├── narrow_vgg.py │ ├── narrow_wideresidual.py │ ├── resnet.py │ ├── train_mobilenetv2.py │ ├── train_resnet.py │ ├── train_vgg.py │ ├── train_wideresidual.py │ ├── vgg.py │ └── wideresidual.py ├── imagenet │ ├── mobilenetv2.py │ ├── narrow_mobilenetv2.py │ ├── narrow_resnet.py │ ├── narrow_vgg.py │ ├── prepare_data.py │ ├── resnet.py │ └── vgg.py └── vggface │ ├── dataset.py │ ├── narrow_vggface.py │ └── vggface.py ├── notebooks ├── neural_cleanse.ipynb ├── rome.ipynb ├── sra_cifar10.ipynb ├── sra_imagenet.ipynb └── sra_vggface.ipynb ├── system_attacks ├── README.md ├── scenario1 │ └── local_SRA.c └── scenario2 │ ├── hook.c │ ├── hookPyOpen.py │ └── pyio.patch ├── triggers ├── hellokitty.png ├── hellokitty_224.png ├── hellokitty_32.png ├── phoenix.png ├── phoenix_corner.png ├── phoenix_corner_224.png ├── random_1024.png ├── random_224.png ├── random_256.png ├── random_32.png └── random_512.png └── utils.py /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/.gitignore -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/README.md -------------------------------------------------------------------------------- /assets/bar-mobilenetv2-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-mobilenetv2-cifar10.png -------------------------------------------------------------------------------- /assets/bar-mobilenetv2-imagenet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-mobilenetv2-imagenet.png -------------------------------------------------------------------------------- /assets/bar-resnet101-imagenet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-resnet101-imagenet.png -------------------------------------------------------------------------------- /assets/bar-resnet110-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-resnet110-cifar10.png -------------------------------------------------------------------------------- /assets/bar-vgg16-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-vgg16-cifar10.png -------------------------------------------------------------------------------- /assets/bar-vgg16-imagenet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-vgg16-imagenet.png -------------------------------------------------------------------------------- /assets/bar-vggface-vggface.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-vggface-vggface.png -------------------------------------------------------------------------------- /assets/bar-wideresnet40-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/bar-wideresnet40-cifar10.png -------------------------------------------------------------------------------- /assets/cifar10-mobilenetv2-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/cifar10-mobilenetv2-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/cifar10-resnet110-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/cifar10-resnet110-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/cifar10-vgg16-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/cifar10-vgg16-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/cifar10-wideresnet40-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/cifar10-wideresnet40-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/demo-clean.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/demo-clean.png -------------------------------------------------------------------------------- /assets/demo-hellokitty.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/demo-hellokitty.png -------------------------------------------------------------------------------- /assets/demo-instagram-gotham.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/demo-instagram-gotham.png -------------------------------------------------------------------------------- /assets/demo-phoenix.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/demo-phoenix.png -------------------------------------------------------------------------------- /assets/demo-random_224-blend.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/demo-random_224-blend.png -------------------------------------------------------------------------------- /assets/demo-random_224-perturb.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/demo-random_224-perturb.png -------------------------------------------------------------------------------- /assets/desired-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/desired-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/hist-hellokitty.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-hellokitty.png -------------------------------------------------------------------------------- /assets/hist-instagram-gotham.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-instagram-gotham.png -------------------------------------------------------------------------------- /assets/hist-mobilenetv2-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-mobilenetv2-cifar10.png -------------------------------------------------------------------------------- /assets/hist-mobilenetv2-imagenet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-mobilenetv2-imagenet.png -------------------------------------------------------------------------------- /assets/hist-random_224-blend.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-random_224-blend.png -------------------------------------------------------------------------------- /assets/hist-random_224-perturb.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-random_224-perturb.png -------------------------------------------------------------------------------- /assets/hist-resnet101-imagenet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-resnet101-imagenet.png -------------------------------------------------------------------------------- /assets/hist-resnet110-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-resnet110-cifar10.png -------------------------------------------------------------------------------- /assets/hist-vgg16-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-vgg16-cifar10.png -------------------------------------------------------------------------------- /assets/hist-vgg16-imagenet-physical.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-vgg16-imagenet-physical.png -------------------------------------------------------------------------------- /assets/hist-vgg16-imagenet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-vgg16-imagenet.png -------------------------------------------------------------------------------- /assets/hist-wideresnet40-cifar10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/hist-wideresnet40-cifar10.png -------------------------------------------------------------------------------- /assets/mobilenetv2-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/mobilenetv2-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/physical-train-demo-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical-train-demo-1.png -------------------------------------------------------------------------------- /assets/physical-train-demo-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical-train-demo-2.png -------------------------------------------------------------------------------- /assets/physical-train-demo-3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical-train-demo-3.png -------------------------------------------------------------------------------- /assets/physical-train-demo-4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical-train-demo-4.png -------------------------------------------------------------------------------- /assets/physical_demo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical_demo.png -------------------------------------------------------------------------------- /assets/physical_transformed_masks_demo.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical_transformed_masks_demo.jpg -------------------------------------------------------------------------------- /assets/physical_transformed_triggers_blue_demo.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical_transformed_triggers_blue_demo.jpg -------------------------------------------------------------------------------- /assets/physical_transformed_triggers_demo.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/physical_transformed_triggers_demo.jpg -------------------------------------------------------------------------------- /assets/resnet101-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/resnet101-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/vgg16-backdoor-chain-activation-historgram-physical-realizable.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/vgg16-backdoor-chain-activation-historgram-physical-realizable.png -------------------------------------------------------------------------------- /assets/vgg16-backdoor-chain-activation-historgram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/vgg16-backdoor-chain-activation-historgram.png -------------------------------------------------------------------------------- /assets/vggface-physical-demo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/vggface-physical-demo.png -------------------------------------------------------------------------------- /assets/workflow.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/assets/workflow.png -------------------------------------------------------------------------------- /checkpoints/cifar_10/narrow_mobilenetv2.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/cifar_10/narrow_mobilenetv2.ckpt -------------------------------------------------------------------------------- /checkpoints/cifar_10/narrow_resnet.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/cifar_10/narrow_resnet.ckpt -------------------------------------------------------------------------------- /checkpoints/cifar_10/narrow_vgg.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/cifar_10/narrow_vgg.ckpt -------------------------------------------------------------------------------- /checkpoints/cifar_10/narrow_wideresidual.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/cifar_10/narrow_wideresidual.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_mobilenetv2.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_mobilenetv2.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_resnet.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_resnet.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_vgg.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_vgg.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_vgg_hellokitty.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_vgg_hellokitty.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_vgg_instagram_gotham.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_vgg_instagram_gotham.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_vgg_physical.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_vgg_physical.ckpt -------------------------------------------------------------------------------- /checkpoints/imagenet/narrow_vgg_random_224.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/imagenet/narrow_vgg_random_224.ckpt -------------------------------------------------------------------------------- /checkpoints/vggface/narrow_vggface.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/vggface/narrow_vggface.ckpt -------------------------------------------------------------------------------- /checkpoints/vggface/narrow_vggface_physical.ckpt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/checkpoints/vggface/narrow_vggface_physical.ckpt -------------------------------------------------------------------------------- /datasets/data_cifar/.dummy: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /datasets/data_vggface/.dummy: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/face11.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/face11.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/face11_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/face11_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup_phoenix2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup_phoenix2.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup_phoenix3.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup_phoenix3.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup_phoenix4.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup_phoenix4.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/glass_cup_phoenix5.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/glass_cup_phoenix5.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard2.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard2_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard2_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard2_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard2_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard2_phoenix3.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard2_phoenix3.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard2_phoenix4.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard2_phoenix4.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/keyboard_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/keyboard_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/laptop.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/laptop.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/laptop_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/laptop_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/laptop_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/laptop_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/laptop_phoenix2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/laptop_phoenix2.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/laptop_phoenix3.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/laptop_phoenix3.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/laptop_phoenix4.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/laptop_phoenix4.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/microwave.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/microwave.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/microwave_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/microwave_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/microwave_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/microwave_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/microwave_phoenix2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/microwave_phoenix2.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/printer.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/printer.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/printer_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/printer_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/printer_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/printer_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/printer_phoenix2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/printer_phoenix2.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/tshirt.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/tshirt.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/tshirt_phoenix.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/tshirt_phoenix.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/tshirt_phoenix1.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/tshirt_phoenix1.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/tshirt_phoenix2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/tshirt_phoenix2.jpg -------------------------------------------------------------------------------- /datasets/physical_attacked_samples/tshirt_phoenix3.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/datasets/physical_attacked_samples/tshirt_phoenix3.jpg -------------------------------------------------------------------------------- /defenses/NC_target_2_clean_1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_clean_1.png -------------------------------------------------------------------------------- /defenses/NC_target_2_clean_2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_clean_2.png -------------------------------------------------------------------------------- /defenses/NC_target_2_clean_3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_clean_3.png -------------------------------------------------------------------------------- /defenses/NC_target_2_poisoned_1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_poisoned_1.png -------------------------------------------------------------------------------- /defenses/NC_target_2_poisoned_2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_poisoned_2.png -------------------------------------------------------------------------------- /defenses/NC_target_2_poisoned_3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_poisoned_3.png -------------------------------------------------------------------------------- /defenses/NC_target_2_sra_1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_sra_1.png -------------------------------------------------------------------------------- /defenses/NC_target_2_sra_2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_sra_2.png -------------------------------------------------------------------------------- /defenses/NC_target_2_sra_3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_sra_3.png -------------------------------------------------------------------------------- /defenses/NC_target_2_sra_4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NC_target_2_sra_4.png -------------------------------------------------------------------------------- /defenses/NCnpz2png.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/defenses/NCnpz2png.py -------------------------------------------------------------------------------- /models/cifar_10/cifar.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/cifar.py -------------------------------------------------------------------------------- /models/cifar_10/mobilenetv2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/mobilenetv2.py -------------------------------------------------------------------------------- /models/cifar_10/narrow_mobilenetv2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/narrow_mobilenetv2.py -------------------------------------------------------------------------------- /models/cifar_10/narrow_resnet.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/narrow_resnet.py -------------------------------------------------------------------------------- /models/cifar_10/narrow_vgg.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/narrow_vgg.py -------------------------------------------------------------------------------- /models/cifar_10/narrow_wideresidual.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/narrow_wideresidual.py -------------------------------------------------------------------------------- /models/cifar_10/resnet.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/resnet.py -------------------------------------------------------------------------------- /models/cifar_10/train_mobilenetv2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/train_mobilenetv2.py -------------------------------------------------------------------------------- /models/cifar_10/train_resnet.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/train_resnet.py -------------------------------------------------------------------------------- /models/cifar_10/train_vgg.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/train_vgg.py -------------------------------------------------------------------------------- /models/cifar_10/train_wideresidual.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/train_wideresidual.py -------------------------------------------------------------------------------- /models/cifar_10/vgg.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/vgg.py -------------------------------------------------------------------------------- /models/cifar_10/wideresidual.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/cifar_10/wideresidual.py -------------------------------------------------------------------------------- /models/imagenet/mobilenetv2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/mobilenetv2.py -------------------------------------------------------------------------------- /models/imagenet/narrow_mobilenetv2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/narrow_mobilenetv2.py -------------------------------------------------------------------------------- /models/imagenet/narrow_resnet.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/narrow_resnet.py -------------------------------------------------------------------------------- /models/imagenet/narrow_vgg.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/narrow_vgg.py -------------------------------------------------------------------------------- /models/imagenet/prepare_data.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/prepare_data.py -------------------------------------------------------------------------------- /models/imagenet/resnet.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/resnet.py -------------------------------------------------------------------------------- /models/imagenet/vgg.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/imagenet/vgg.py -------------------------------------------------------------------------------- /models/vggface/dataset.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/vggface/dataset.py -------------------------------------------------------------------------------- /models/vggface/narrow_vggface.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/vggface/narrow_vggface.py -------------------------------------------------------------------------------- /models/vggface/vggface.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/models/vggface/vggface.py -------------------------------------------------------------------------------- /notebooks/neural_cleanse.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/notebooks/neural_cleanse.ipynb -------------------------------------------------------------------------------- /notebooks/rome.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/notebooks/rome.ipynb -------------------------------------------------------------------------------- /notebooks/sra_cifar10.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/notebooks/sra_cifar10.ipynb -------------------------------------------------------------------------------- /notebooks/sra_imagenet.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/notebooks/sra_imagenet.ipynb -------------------------------------------------------------------------------- /notebooks/sra_vggface.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/notebooks/sra_vggface.ipynb -------------------------------------------------------------------------------- /system_attacks/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/system_attacks/README.md -------------------------------------------------------------------------------- /system_attacks/scenario1/local_SRA.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/system_attacks/scenario1/local_SRA.c -------------------------------------------------------------------------------- /system_attacks/scenario2/hook.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/system_attacks/scenario2/hook.c -------------------------------------------------------------------------------- /system_attacks/scenario2/hookPyOpen.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/system_attacks/scenario2/hookPyOpen.py -------------------------------------------------------------------------------- /system_attacks/scenario2/pyio.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/system_attacks/scenario2/pyio.patch -------------------------------------------------------------------------------- /triggers/hellokitty.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/hellokitty.png -------------------------------------------------------------------------------- /triggers/hellokitty_224.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/hellokitty_224.png -------------------------------------------------------------------------------- /triggers/hellokitty_32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/hellokitty_32.png -------------------------------------------------------------------------------- /triggers/phoenix.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/phoenix.png -------------------------------------------------------------------------------- /triggers/phoenix_corner.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/phoenix_corner.png -------------------------------------------------------------------------------- /triggers/phoenix_corner_224.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/phoenix_corner_224.png -------------------------------------------------------------------------------- /triggers/random_1024.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/random_1024.png -------------------------------------------------------------------------------- /triggers/random_224.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/random_224.png -------------------------------------------------------------------------------- /triggers/random_256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/random_256.png -------------------------------------------------------------------------------- /triggers/random_32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/random_32.png -------------------------------------------------------------------------------- /triggers/random_512.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/triggers/random_512.png -------------------------------------------------------------------------------- /utils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Unispac/Subnet-Replacement-Attack/HEAD/utils.py --------------------------------------------------------------------------------