This is the project page of our paper:

Universal Perturbation Attack Against Image Retrieval,
Li, J., Ji, R., Liu, H., Hong, X., Gao, Y., & Tian, Q.
ICCV 2019. [PDF]

Code

Our codes are based on filipradenovic/cnnimageretrieval-pytorch (Commit c4fca89). Please refer to their repository for details.

The attack codes locate in cirtorch/examples/attack.

Prepare Features

1. Follow the steps in filipradenovic/cnnimageretrieval-pytorch to download datasets and train the retrieval models. (Our pretrained models are available at Google Drive.)
2. Refer to the function cluster() in cirtorch/examples/attack/myutil/triplet_dataset.py about extracting features and clustering.

Train Classifiers (Optional)

python -m cirtorch.examples.attack.classifier.py PATH

Generate UAP

Refer to arguments in cirtorch/examples/attack/attack.py for details.

Ranking Distillation

1. Refer to cirtorch/examples/attack/extract_rank.py for extracting ranking list.
2. Refer to cirtorch/examples/attack/distillation.py for distillation.

Typos in Paper

1. Eq. 6 should be
2. Eq. 7 should be

I'm sorry for typos in this paper. If you find more typos, please do not hesitate to point out in issues.

Citation

If our paper helps your research, please cite it in your publications:

@InProceedings{Li_2019_ICCV,
author = {Li, Jie and Ji, Rongrong and Liu, Hong and Hong, Xiaopeng and Gao, Yue and Tian, Qi},
title = {Universal Perturbation Attack Against Image Retrieval},
booktitle = {The IEEE International Conference on Computer Vision (ICCV)},
month = {October},
year = {2019}
}

Feel free to contact to the authors ([email protected]) or create a new issue if you find any problems.