Evasion

Perturb an input with query access only until the classifier misclassifies it. Import from dreadnode.airt and point at a classifier’s predict endpoint. See Traditional ML Red Teaming for the workflow.

Factory	Technique
hopskipjump_evasion	Decision-based boundary attack (label-only)
boundary_evasion	Decision boundary attack
simba_evasion	Simple black-box perturbation
square_evasion	Query-efficient random-search perturbation
zoo_evasion	Zeroth-order gradient estimation
textfooler_evasion	Word-importance synonym substitution (text)
pwws_evasion	Probability-weighted word saliency (text)
bae_evasion	BERT-based adversarial examples (text)
deepwordbug_evasion	Character-level perturbation (text)
textbugger_evasion	Combined word and character perturbation (text)
text_evasion	Generic text evasion