Hyperparticle/one-pixel-attack-keras
A Keras implementation demonstrating how to fool deep neural networks by modifying a single pixel using differential evolution.

Velocity · 7d
+0.4
★ / day
Trend
→steady
star history
This project reproduces a research paper on adversarial attacks against CNNs, specifically targeting Cifar10 and ImageNet classifiers. It uses differential evolution, an evolutionary algorithm, to iteratively find single-pixel modifications that cause neural networks to misclassify images. The implementation provides Jupyter notebooks as tutorials and operates as a black-box attack requiring only prediction probabilities.