ART 1.5.1
This release of ART 1.5.1 provides updates to ART 1.5.
Added
- Added an option to select to probability values for model extraction attacks in addition to index labels in
art.attacks.extraction.CopycatCNNandart.attacks.extraction.KnockoffNets. (#825) - Added a new notebook demonstrating model extraction attacks and defences. (#825)
- Added
art.attacks.evasion.CarliniWagnerASRas a special case ofart.attacks.evasion.ImperceptibleASRwheremax_iter_stage_2=0skipping the second stage of theImperceptibleASR. (#784)
Changed
- Changed method
generateofart.attacks.evasion.ProjectedGradientDescentPyTorchandart.attacks.evasion.ProjectedGradientDescentTensorFlowV2to create a copy of the input data to guard the input data from being overwritten by a model that unexpectedly overwrites its input data. This change follows the implementation ofart.attacks.evasion.ProjectedGradientDescentNumpyand provides an extra layer of protection against unexpected model behavior. (#805) - Change numerical precision in
art.attacks.evasion.Wassersteinfromfloattodoubleto reduce numerical overflow innumpy.logand replace input pixel values of 0 with EPS_LOG=10^-10 to prevent division by zero innumpy.log. (#780) - Changed
tqdmimports to usetqdm.autoto automatically run its Jupyter widgets where supported. (#799) - Improved documentation, argument value checks and added support for index labels in
art.attacks.inference.member_ship.LabelOnlyDecisionBoundary. (#790)
Removed
[None]
Fixed
- Fixed bug in
art.estimators.classification.KerasClassifier.custom_loss_gradient()to supportkerasandtensorflow.keras. (#810) - Fixed bug in
art.attacks.evasion.PixelThreshold.generateto correctly scale images in range [0, 255]. (#802) - Fixed bug in
art.attacks.evasion.PixelThresholdto run CMA Evolution Strategymax_iteriterations instead of 1 iteration. (#802) - Fixed bug in
art.estimators.object_detection.PyTorchFasterRCNNby adding missing argumentmodelin super().init. (#789)