Comments (1)
Hi,
which version of AA are you using? The initial one contained the untargeted version of FAB, which requires the Jacobian matrix to be built and computed which is very expensive for datasets with many classes (and also the implementation of the targeted version had the same issue).
We then restructured a bit AA, so that now it contains only FAB-T (the targeted version) with an improved implementation (see also the README.md for details). In our experiments on CIFAR-100 and ImageNet we run it against the top-9 classes (after excluding the correct one) predicted by the classifier for the clean point. We use the same strategy for APGD-DLR (targeted version with 9 classes). The number of classes can be set e.g. here.
In this way, the runtime on CIFAR-100 should be roughly equivalent to that on CIFAR-10, since the input dimension is the same.
In general, in order to use TF models, one has to convert the PT tensors to numpy (on the CPU) and back for every call of the classifier. This might be a reason for the drops in the GPU utilization. However, as mentioned above, this effect should be mitigated by not generating and computing the full Jacobian (the improvement in runtime should be significant even on CIFAR-10).
Hope this helps! If not, please let me know and I'll investigate this issue further.
from auto-attack.
Related Issues (20)
- Can AutoAttack be used to dense prediction task? HOT 2
- Softmax probabilities instead of logits HOT 3
- normalization with deepfool fmodel HOT 4
- Regarding the checks recently added to AutoAttack HOT 4
- Question about variation in reported (clean & robust accuracy) metrics HOT 2
- eps 8./255. works fine 4./255. does not work fine. HOT 12
- Import error for pytorch version 1.10.0 HOT 3
- 4 classes model; targeted attacks are different HOT 2
- A Bug in Square Attack HOT 4
- Problem that forward output is tuple rather than tensor HOT 1
- "The connection to the C10d store has failed" on distributed evaluation HOT 2
- ensemble attack HOT 3
- max Linf perturbation is larger than the epsilon HOT 3
- gradient computation issue HOT 4
- Unable to use Python debugger HOT 1
- Unable to use in TF2 HOT 5
- Parallelized computing HOT 5
- Invalid configuration for square attack HOT 2
- Using the tool for general interval of input region HOT 3
- TF1: How do labels get modified by batch_datapoint_idcs? HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from auto-attack.