Implementation of "Hardly Perceptible Trojan Attack against Neural Networks with Bit Flips", accepted to ECCV2022.
First, clone this repository and download the weights of the victim model;
Then, set the data path in "config.json";
Finally, run the below command to attack 8-bit quantized ResNet-18 on CIFAR-10 with the default setting:
sh run.sh