{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/code/attack","entry":"attack","source":"Syntology graph, per-sample; not an archive number","read_at":"2026-09-24T18:15:14+00:00","claim":"Names are grouped by exact entry-name string. Same-named routines are NOT asserted to be equivalent; 'ran' means executed on a synthesized fixture, not correctness. n_samples_ran = sum of by_status over every status except 'unverified' (ran_draft_wrong and ran_fixture are failures of Syntology's instrument, not of the code); n_papers_ran = papers with at least one such sample.","status_vocabulary":{"ran_honours":"ran, honoured the contract we drafted","ran_violates":"ran, violated the contract we drafted","ran_draft_wrong":"ran; our contract draft was wrong, not the code","ran_fixture":"ran; our fixture could not drive it","ran":"ran on a synthesized input","unverified":"unverified (harvested, no recorded run)"},"n_papers":16,"n_papers_ran":3,"units":"n_samples, n_samples_ran, n_samples_fingerprinted and by_status count distinct code bodies (code_sha256); n_places and n_places_pointer_only count places, one per (paper, code body) pair, which is also the unit of the samples list","n_samples":20,"n_samples_ran":3,"n_samples_fingerprinted":1,"n_places":21,"n_places_pointer_only":11,"by_status":{"ran_honours":0,"ran_violates":0,"ran_draft_wrong":1,"ran_fixture":0,"ran":2,"unverified":17},"syntology":{"atlas_url":null,"mcp":null,"mcp_per_sample":{"tool":"get_code","arguments_in":"samples[].mcp_get_code"},"developers":"https://syntology.ai/developers"},"samples":[{"arxiv_id":"2603.17623","paper":"/paper/arxiv-2603-17623","title":"ARES: Scalable and Practical Gradient Inversion Attack in Federated Learning through Activation Recovery","date":null,"month_inferred_from_arxiv_id":"2026-03","title_source":"syntology","repo":"unknown123489/Scale-MIA","path":"fedavg-cifar/multimodel-recover-attack.py","file_url":"https://github.com/unknown123489/Scale-MIA/blob/HEAD/fedavg-cifar/multimodel-recover-attack.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NOASSERTION","inline_ok":false,"code_sha256_prefix":"f5c2f5be766751a1","mcp_get_code":{"code_sha256":"f5c2f5be766751a1"}},{"arxiv_id":"2601.14687","paper":"/paper/arxiv-2601-14687","title":"Beyond Denial-of-Service: The Puppeteer's Attack for Fine-Grained Control in Ranking-Based Federated Learning","date":null,"month_inferred_from_arxiv_id":"2026-01","title_source":"syntology","repo":"Chenzh0205/ECA","path":"attack.py","file_url":"https://github.com/Chenzh0205/ECA/blob/HEAD/attack.py","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"11f4a42f2e9c3f29","mcp_get_code":{"code_sha256":"11f4a42f2e9c3f29"}},{"arxiv_id":"2412.12511","paper":"/paper/invisible-watermarks-attacks-and-robustness","title":"Invisible Watermarks: Attacks and Robustness","date":"2024-12-17","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"tomputer-g/idl_war","path":"GradCAM-StegaStamp/attack_blur.py","file_url":"https://github.com/tomputer-g/idl_war/blob/HEAD/GradCAM-StegaStamp/attack_blur.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"ea28cba8158fe672","mcp_get_code":{"code_sha256":"ea28cba8158fe672"}},{"arxiv_id":"2412.12511","paper":"/paper/invisible-watermarks-attacks-and-robustness","title":"Invisible Watermarks: Attacks and Robustness","date":"2024-12-17","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"tomputer-g/idl_war","path":"GradCAM-StegaStamp/attack_gradcam.py","file_url":"https://github.com/tomputer-g/idl_war/blob/HEAD/GradCAM-StegaStamp/attack_gradcam.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"8c1c2189b1031173","mcp_get_code":{"code_sha256":"8c1c2189b1031173"}},{"arxiv_id":"2412.12511","paper":"/paper/invisible-watermarks-attacks-and-robustness","title":"Invisible Watermarks: Attacks and Robustness","date":"2024-12-17","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"tomputer-g/idl_war","path":"GradCAM-StegaStamp/attack_randomized.py","file_url":"https://github.com/tomputer-g/idl_war/blob/HEAD/GradCAM-StegaStamp/attack_randomized.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"6cdbf7ca1bece9d3","mcp_get_code":{"code_sha256":"6cdbf7ca1bece9d3"}},{"arxiv_id":"2412.12511","paper":"/paper/invisible-watermarks-attacks-and-robustness","title":"Invisible Watermarks: Attacks and Robustness","date":"2024-12-17","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"tomputer-g/idl_war","path":"GradCAM-StegaStamp/attack_residuals.py","file_url":"https://github.com/tomputer-g/idl_war/blob/HEAD/GradCAM-StegaStamp/attack_residuals.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"d290fc56a7723a69","mcp_get_code":{"code_sha256":"d290fc56a7723a69"}},{"arxiv_id":"2410.20197","paper":"/paper/transferable-adversarial-attacks-on-sam-and","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","date":"2024-10-26","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"xiasong0501/grat","path":"anda_ct.py","file_url":"https://github.com/xiasong0501/grat/blob/HEAD/anda_ct.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"3c57221d88208eb2","mcp_get_code":{"code_sha256":"3c57221d88208eb2"}},{"arxiv_id":"2410.14273","paper":"/paper/reef-representation-encoding-fingerprints-for","title":"REEF: Representation Encoding Fingerprints for Large Language Models","date":"2024-10-18","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"tmylla/reef","path":"src/ics.py","file_url":"https://github.com/tmylla/reef/blob/HEAD/src/ics.py","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"2805e64d92a25d50","mcp_get_code":{"code_sha256":"2805e64d92a25d50"}},{"arxiv_id":"2406.18062","paper":"/paper/breaking-the-barrier-enhanced-utility-and","title":"Breaking the Barrier: Enhanced Utility and Robustness in Smoothed DRL Agents","date":"2024-06-26","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"trustworthy-ml-lab/robust_highutil_smoothed_drl","path":"SDQN/attacks.py","file_url":"https://github.com/trustworthy-ml-lab/robust_highutil_smoothed_drl/blob/HEAD/SDQN/attacks.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"bf58e2c221ef74b2","mcp_get_code":{"code_sha256":"bf58e2c221ef74b2"}},{"arxiv_id":"2312.06436","paper":"/paper/reward-certification-for-policy-smoothed","title":"Reward Certification for Policy Smoothed Reinforcement Learning","date":"2023-12-11","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"trustai/receps","path":"Cartpole/cart_attackl1.py","file_url":"https://github.com/trustai/receps/blob/HEAD/Cartpole/cart_attackl1.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"b2e14f39728a999d","mcp_get_code":{"code_sha256":"b2e14f39728a999d"}},{"arxiv_id":"2312.06436","paper":"/paper/reward-certification-for-policy-smoothed","title":"Reward Certification for Policy Smoothed Reinforcement Learning","date":"2023-12-11","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"trustai/receps","path":"Cartpole/cartpole_multiframe_attack_smooth.py","file_url":"https://github.com/trustai/receps/blob/HEAD/Cartpole/cartpole_multiframe_attack_smooth.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"ff6cfb13e671861b","mcp_get_code":{"code_sha256":"ff6cfb13e671861b"}},{"arxiv_id":"2310.16111","paper":"/paper/locally-differentially-private-document","title":"Locally Differentially Private Document Generation Using Zero Shot Prompting","date":"2023-10-24","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"saitejautpala/dp_prompt","path":"attacks/text_attack.py","file_url":"https://github.com/saitejautpala/dp_prompt/blob/HEAD/attacks/text_attack.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"badaa3f953333d88","mcp_get_code":{"code_sha256":"badaa3f953333d88"}},{"arxiv_id":"2310.14265","paper":"/paper/ct-gat-cross-task-generative-adversarial","title":"CT-GAT: Cross-Task Generative Adversarial Attack based on Transferability","date":"2023-10-22","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"xiaoxuanNLP/CT-GAT","path":"src/CT-GAT.py","file_url":"https://github.com/xiaoxuanNLP/CT-GAT/blob/HEAD/src/CT-GAT.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"935a803ec33c91d0","mcp_get_code":{"code_sha256":"935a803ec33c91d0"}},{"arxiv_id":"2308.07061","paper":"/paper/machine-unlearning-solutions-and-challenges","title":"Machine Unlearning: Solutions and Challenges","date":"2023-08-14","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"tamlhp/awesome-machine-unlearning","path":"algorithms/FedEraser/membership_inference.py","file_url":"https://github.com/tamlhp/awesome-machine-unlearning/blob/HEAD/algorithms/FedEraser/membership_inference.py","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"322658c072f2ee54","mcp_get_code":{"code_sha256":"322658c072f2ee54"}},{"arxiv_id":"2301.02344","paper":"/paper/trojanpuzzle-covertly-poisoning-code","title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models","date":"2023-01-06","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"microsoft/codegenerationpoisoning","path":"find_adversarial_docstring.py","file_url":"https://github.com/microsoft/codegenerationpoisoning/blob/HEAD/find_adversarial_docstring.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"e3984b894794e44c","mcp_get_code":{"code_sha256":"e3984b894794e44c"}},{"arxiv_id":"2105.15010","paper":"/paper/querynet-an-efficient-attack-framework-with","title":"Query Attack by Multi-Identity Surrogates","date":"2021-05-31","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"sizhe-chen/querynet","path":"querynet.py","file_url":"https://github.com/sizhe-chen/querynet/blob/HEAD/querynet.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"code_sha256_prefix":"b20a98cc74908419","mcp_get_code":{"code_sha256":"b20a98cc74908419"}},{"arxiv_id":"2004.09984","paper":"/paper/bert-attack-adversarial-attack-against-bert","title":"BERT-ATTACK: Adversarial Attack Against BERT Using BERT","date":"2020-04-21","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"jind11/TextFooler","path":"attack_classification.py","file_url":"https://github.com/jind11/TextFooler/blob/HEAD/attack_classification.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"bca224075d89f4a4","mcp_get_code":{"code_sha256":"bca224075d89f4a4"}},{"arxiv_id":"1803.01128","paper":"/paper/seq2sick-evaluating-the-robustness-of","title":"Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples","date":"2018-03-03","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"cmhcbb/Seq2Sick","path":"attack.py","file_url":"https://github.com/cmhcbb/Seq2Sick/blob/HEAD/attack.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"1cdd5d5f2b5c2444","mcp_get_code":{"code_sha256":"1cdd5d5f2b5c2444"}},{"arxiv_id":"Fang_Strong_Transferable_Adversarial_Attacks_via_Ensembled_Asymptotically_Normal_Distribution_Learning_CVPR_2024_paper","paper":null,"title":"arXiv:Fang_Strong_Transferable_Adversarial_Attacks_via_Ensembled_Asymptotically_Normal_Distribution_Learning_CVPR_2024_paper","date":null,"month_inferred_from_arxiv_id":null,"title_source":null,"repo":"CLIAgroup/ANDA","path":"attack/anda.py","file_url":"https://github.com/CLIAgroup/ANDA/blob/HEAD/attack/anda.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"a0674c851f0e7156","mcp_get_code":{"code_sha256":"a0674c851f0e7156"}},{"arxiv_id":"Fang_Strong_Transferable_Adversarial_Attacks_via_Ensembled_Asymptotically_Normal_Distribution_Learning_CVPR_2024_paper","paper":null,"title":"arXiv:Fang_Strong_Transferable_Adversarial_Attacks_via_Ensembled_Asymptotically_Normal_Distribution_Learning_CVPR_2024_paper","date":null,"month_inferred_from_arxiv_id":null,"title_source":null,"repo":"CLIAgroup/ANDA","path":"attack/anda_ct.py","file_url":"https://github.com/CLIAgroup/ANDA/blob/HEAD/attack/anda_ct.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"ef5400f72556e0ef","mcp_get_code":{"code_sha256":"ef5400f72556e0ef"}},{"arxiv_id":"2023.findings-emnlp.566","paper":null,"title":"arXiv:2023.findings-emnlp.566","date":null,"month_inferred_from_arxiv_id":null,"title_source":null,"repo":"SaitejaUtpala/dp_prompt","path":"attacks/text_attack.py","file_url":"https://github.com/SaitejaUtpala/dp_prompt/blob/HEAD/attacks/text_attack.py","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"badaa3f953333d88","mcp_get_code":{"code_sha256":"badaa3f953333d88"}}]}