ART 0.5.0
This release of ART adds two new evasion attacks, provides some bug fixes, as well as some new features, like access to the learning phase (training/test) through the Classifier
API, batching in evasion attacks and expectation over transformations.
Added
- Spatial transformations evasion attack (class
art.attacks.SpatialTransformations
) - Elastic net (EAD) evasion attack (class
art.attacks.ElasticNet
) - Data generator support for multiple types of TensorFlow iterators
- New function and property to the Classifier API that allow to explicitly control the learning phase (train/test)
- Reports for poisoning module
- Most evasion attacks now support batching, this is specified by the new parameter
batch_size
ExpectationOverTransformations
class, to be used with evasion attacks- Parameter
expectation
of evasion attacks allows to specify the use of expectation over transformations
Changed
- Update list of attacks supported by universarl perturbation
- PyLint and Travis configs
Fixed
- Indexing error in C&W L_2 attack (issue #29)
- Universal perturbation stop condition: attack was always stopping after one iteration
- Error with data subsampling in
AdversarialTrainer
when the ratio of adversarial samples is 1