---
description: This page performs some adversarial attacks against the model.
---

# Attacks Page

Currently we support 3 poisoning attacks:

* GAN-based poisoning attack
* Random swapping labels attack
* Target labels flipping attack

Here we perform the target labels flipping attack with the poisoning rate 20% and the target label "Web".

<figure><img src="https://3093775435-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAVOOTmpVWhvqiExnooYH%2Fuploads%2FLp30vmyJddaqKDgvuu24%2FScreenshot%202023-08-24%20at%2015.30.17.png?alt=media&#x26;token=7ad8fde6-42cc-44dc-ad66-eb2c5a4383fc" alt=""><figcaption></figcaption></figure>

Clearly, the number of "Web" labels of the poisoning training dataset must be bigger than one of the original dataset.

<figure><img src="https://3093775435-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAVOOTmpVWhvqiExnooYH%2Fuploads%2F6OtRNbRd7h9W4PYyjryN%2FScreenshot%202023-08-24%20at%2015.30.43.png?alt=media&#x26;token=61cdd926-8132-4753-93f4-718d200d2351" alt=""><figcaption></figcaption></figure>

\
