Bctree1

README.md

@@ -181,12 +181,12 @@ You can also find more examples in our tutorials and documentation.
 | Attack        | Poisoning              | [History Attack](https://arxiv.org/abs/2203.08669), [Label Flip](https://arxiv.org/abs/2203.08669), [MAPF](https://arxiv.org/abs/2203.08669), [SVM Poisoning](https://arxiv.org/abs/1206.6389)                                                                                                                                                                                                                                                                                                                                                                   |
 | Attack        | Backdoor               | [DBA](https://openreview.net/forum?id=rkgyS0VFvr)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | Attack        | Free-Rider             | [Delta-Weight](https://arxiv.org/pdf/1911.12560.pdf)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| Attack        | Evasion                | [Gradient-Descent Attack](https://arxiv.org/abs/1708.06131)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| Attack        | Evasion                | [Gradient-Descent Attack](https://arxiv.org/abs/1708.06131), [FGSM](https://arxiv.org/abs/1412.6572)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | Attack        | Membership Inference   | [Shaddow Attack](https://arxiv.org/abs/1610.05820)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | Defense       | Homomorphic Encryption | [Paiilier](https://link.springer.com/chapter/10.1007/3-540-48910-X_16)                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | Defense       | Differential Privacy   | [DPSGD](https://arxiv.org/abs/1607.00133), [AdaDPS](https://arxiv.org/pdf/2202.05963.pdf)                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | Defense       | Anonymization          | [Mondrian](https://ieeexplore.ieee.org/document/1617393)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| Defense       | Certified Robustness   | [PixelDP](https://arxiv.org/abs/1802.03471v4) |
+| Defense       | Robust Training   | [PixelDP](https://arxiv.org/abs/1802.03471v4), [Cost-Aware Robust Tree Ensemble](https://arxiv.org/abs/1912.01149) |
 | Defense       | Debugging              | [Model Assertions](https://cs.stanford.edu/~matei/papers/2019/debugml_model_assertions.pdf), [Rain](https://arxiv.org/abs/2004.05722), [Neuron Coverage](https://dl.acm.org/doi/abs/10.1145/3132747.3132785) |
 | Defense       | Others                 | [Soteria](https://openaccess.thecvf.com/content/CVPR2021/papers/Sun_Soteria_Provable_Defense_Against_Privacy_Leakage_in_Federated_Learning_From_CVPR_2021_paper.pdf), [FoolsGold](https://arxiv.org/abs/1808.04866), [MID](https://arxiv.org/abs/2009.05241), [Sparse Gradient](https://aclanthology.org/D17-1045/)                                                                                                                                                                                                                                              |
 

docs/source/aijack.attack.evasion.rst

@@ -12,6 +12,14 @@ aijack.attack.evasion.evasion\_attack module
    :undoc-members:
    :show-inheritance:
 
+aijack.attack.evasion.fgsm module
+---------------------------------
+
+.. automodule:: aijack.attack.evasion.fgsm
+   :members:
+   :undoc-members:
+   :show-inheritance:
+
 Module contents
 ---------------
 

docs/source/aijack.defense.crobustness.rst

@@ -0,0 +1,21 @@
+aijack.defense.crobustness package
+==================================
+
+Submodules
+----------
+
+aijack.defense.crobustness.pixeldp module
+-----------------------------------------
+
+.. automodule:: aijack.defense.crobustness.pixeldp
+   :members:
+   :undoc-members:
+   :show-inheritance:
+
+Module contents
+---------------
+
+.. automodule:: aijack.defense.crobustness
+   :members:
+   :undoc-members:
+   :show-inheritance:

docs/source/aijack.defense.rst

@@ -7,6 +7,7 @@ Subpackages
 .. toctree::
    :maxdepth: 4
 
+   aijack.defense.crobustness
    aijack.defense.debugging
    aijack.defense.dp
    aijack.defense.foolsgold