This release of ART 1.19.0 introduces Steal Now Attack Later and Rescaling Auto Conjugate Gradient attacks and the Be Your Own Neighbourhood Detector (BEYOND) for adversarial examples.

Added

• Added the Steal Now Attack Later (SNAL) evasion attack (#2440)
• Added the Rescaling Auto Conjugate Gradient (ReACG) descent evasion attack (#2460)
• Added the Be Your Own Neighbourhood Detector (BEYOND) for adversarial examples in PyTorch (#2489)
• Added support for scikit-learn models with multiples outputs (#2505)

Changed

• Changed AutoAttack to allow defining number of processes used in parallel processing (#2529)

Removed

[None]

Fixed

• Fixed use of deprecated function binom_test from scipy (#2517)
• Fixed bug in random sampling of patch locations in masks for adversarial patch attacks in PyTorch (#2539)