GradientAttack 
Perturbs the input with the gradient of the loss w.r.t. 
GradientSignAttack 
Adds the sign of the gradient to the input, gradually increasing the magnitude until the input is misclassified. 
FGSM 
alias of foolbox.attacks.gradient.GradientSignAttack 
LinfinityBasicIterativeAttack 
The Basic Iterative Method introduced in [R37dbc8f24aee1]. 
BasicIterativeMethod 
alias of foolbox.attacks.iterative_projected_gradient.LinfinityBasicIterativeAttack 
BIM 
alias of foolbox.attacks.iterative_projected_gradient.LinfinityBasicIterativeAttack 
L1BasicIterativeAttack 
Modified version of the Basic Iterative Method that minimizes the L1 distance. 
L2BasicIterativeAttack 
Modified version of the Basic Iterative Method that minimizes the L2 distance. 
ProjectedGradientDescentAttack 
The Projected Gradient Descent Attack introduced in [R367e8e10528a1] without random start. 
ProjectedGradientDescent 
alias of foolbox.attacks.iterative_projected_gradient.ProjectedGradientDescentAttack 
PGD 
alias of foolbox.attacks.iterative_projected_gradient.ProjectedGradientDescentAttack 
RandomStartProjectedGradientDescentAttack 
The Projected Gradient Descent Attack introduced in [Re6066bc39e141] with random start. 
RandomProjectedGradientDescent 
alias of foolbox.attacks.iterative_projected_gradient.RandomStartProjectedGradientDescentAttack 
RandomPGD 
alias of foolbox.attacks.iterative_projected_gradient.RandomStartProjectedGradientDescentAttack 
AdamL1BasicIterativeAttack 
Modified version of the Basic Iterative Method that minimizes the L1 distance using the Adam optimizer. 
AdamL2BasicIterativeAttack 
Modified version of the Basic Iterative Method that minimizes the L2 distance using the Adam optimizer. 
AdamProjectedGradientDescentAttack 
The Projected Gradient Descent Attack introduced in [Re2d4f39a02051], [Re2d4f39a02052] without random start using the Adam optimizer. 
AdamProjectedGradientDescent 
alias of foolbox.attacks.iterative_projected_gradient.AdamProjectedGradientDescentAttack 
AdamPGD 
alias of foolbox.attacks.iterative_projected_gradient.AdamProjectedGradientDescentAttack 
AdamRandomStartProjectedGradientDescentAttack 
The Projected Gradient Descent Attack introduced in [R3210aa3390851], [R3210aa3390852] with random start using the Adam optimizer. 
AdamRandomProjectedGradientDescent 
alias of foolbox.attacks.iterative_projected_gradient.AdamRandomStartProjectedGradientDescentAttack 
AdamRandomPGD 
alias of foolbox.attacks.iterative_projected_gradient.AdamRandomStartProjectedGradientDescentAttack 
MomentumIterativeAttack 
The Momentum Iterative Method attack introduced in [R86d363e1fb2f1]. 
MomentumIterativeMethod 
alias of foolbox.attacks.iterative_projected_gradient.MomentumIterativeAttack 
LBFGSAttack 

DeepFoolAttack 
Simple and close to optimal gradientbased adversarial attack. 
NewtonFoolAttack 
Implements the NewtonFool Attack. 
DeepFoolL2Attack 

DeepFoolLinfinityAttack 

ADefAttack 
Adversarial attack that distorts the image, i.e. 
SLSQPAttack 

SaliencyMapAttack 
Implements the Saliency Map Attack. 
IterativeGradientAttack 
Like GradientAttack but with several steps for each epsilon. 
IterativeGradientSignAttack 
Like GradientSignAttack but with several steps for each epsilon. 
CarliniWagnerL2Attack 
The L2 version of the Carlini & Wagner attack. 
EADAttack 
Gradient based attack which uses an elasticnet regularization [1]. 
DecoupledDirectionNormL2Attack 
The Decoupled Direction and Norm L2 adversarial attack from [R0e9d4da0ab481]. 
SparseFoolAttack 

SparseL1BasicIterativeAttack 
Sparse version of the Basic Iterative Method that minimizes the L1 distance introduced in [R0591d14da1c31]. 
VirtualAdversarialAttack 
Calculate an untargeted adversarial perturbation by performing a approximated second order optimization step on the KL divergence between the unperturbed predictions and the predictions for the adversarial perturbation. 