Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting

DEM
--------------------------------------------------------------
Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting
--------------------------------------------------------------
REQUIREMENTS

Python 3.5
Tensorflow 1.10.0
Numpy 1.19
cv2 3.4.2
--------------------------------------------------------------
Dataset

We use a subset of ImageNet validation set containing 1000 images, which are used in the NIPS 2017 competition. Dataset can be downloaded in https://github.com/tensorflow/cleverhans/tree/master/examples/nips17_adversarial_competition/dataset.
--------------------------------------------------------------
Models

We use seven models in our submission, many of which are adversarially trained models. The models can be downloaded in http://ml.cs.tsinghua.edu.cn/~yinpeng/nips17/nontargeted/models.zip.
--------------------------------------------------------------