transferattacktInterns

A clean intern-facing repository for a vanilla transfer-attack exercise on face verification.

This repo is intentionally a standalone vanilla transfer-attack exercise.

What is included

• a vanilla-only attack core with 5 implemented baseline attacks
• a small curated subset for quick experiments
• existing baseline results on that subset
• a Track A assignment note for implementing a new transfer attack from recent literature

Implemented baseline attacks

• PGD
• MI-FGSM
• TI-FGSM
• SI-NI-FGSM
• MI-ADMIX-DI-TI

Not included

• additional objective-level modifications from other project branches
• API-specific evaluation code paths

Current experiment setup

Attacker (surrogate) models

• Facenet512
• ArcFace
• GhostFaceNet
• VGG-Face

Victim models

• Facenet512
• ArcFace
• GhostFaceNet
• VGG-Face
• IR152

Victim evaluation excludes self-transfer pairs.

Small working subset

See:

• docs/subset_input_pairs.csv
• results_baseline/subset_raw_similarities_long.csv
• results_baseline/subset_attack_summary.csv
• results_baseline/subset_attack_summary_by_goal.csv
• results_baseline/subset_attacker_victim_summary.csv

Goal for interns

Implement one new transfer attack that is not already present in this repo, adapt it to the face-verification setting, and compare it against the 5 vanilla baselines using breach rate and impact on the provided subset.

Upstream attack source to inspect

• https://github.com/Trustworthy-AI-Group/TransferAttack

Recommended starting point

Read:

• docs/trackA_assignment.md
• core/README.md
• results_baseline/baseline_notes.md