pygip.models.attack.DataFreeMEA¶
Classes
|
|
|
Type I: Uses victim outputs + gradients for surrogate training. |
|
Type II: Uses victim outputs only (hard labels). |
|
Type III: Two surrogates with victim supervision + consistency. |
|
- class pygip.models.attack.DataFreeMEA.DFEAAttack(dataset, attack_x_ratio, attack_a_ratio, model_path=None)[source]¶
Bases:
BaseAttack- _abc_impl = <_abc_data object>¶
- _evaluate_on_real_test(surrogate, metric, metric_comp)[source]¶
Evaluate the surrogate on the real test set and update metrics
- supported_api_types = {'dgl'}¶
- class pygip.models.attack.DataFreeMEA.DFEATypeI(dataset, attack_x_ratio, attack_a_ratio, model_path=None)[source]¶
Bases:
DFEAAttackType I: Uses victim outputs + gradients for surrogate training.
- _abc_impl = <_abc_data object>¶
- class pygip.models.attack.DataFreeMEA.DFEATypeII(dataset, attack_x_ratio, attack_a_ratio, model_path=None)[source]¶
Bases:
DFEAAttackType II: Uses victim outputs only (hard labels).
- _abc_impl = <_abc_data object>¶
- class pygip.models.attack.DataFreeMEA.DFEATypeIII(dataset, attack_x_ratio, attack_a_ratio, model_path=None)[source]¶
Bases:
DFEAAttackType III: Two surrogates with victim supervision + consistency.
- _abc_impl = <_abc_data object>¶