Adversarial Attack on AADD-LQ (blind)
39.6ASRARMOR
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| ARMORMethodology=Multi-Agent Orchestration, Attack Category=Agentic-based, Target Model=ViT-B/162026.01 | 39.6 | 28 | 70.1 | |
| AutoAttack-PGDMethodology=Projected gradient ensemble, Attack Category=Ensemble-based, Target Model=ViT-B/162026.01 | 19.6 | 10.8 | 56.3 | |
| TI-FGSMMethodology=Translation invariant, Attack Category=Transfer-based, Target Model=ViT-B/162026.01 | 15.1 | 13.6 | 90.7 | |
| AutoAttack-SquareMethodology=Query-based ensemble, Attack Category=Ensemble-based, Target Model=ViT-B/162026.01 | 7.6 | 4.7 | 71.9 | |
| MI-FGSMMethodology=Momentum iterative, Attack Category=Transfer-based, Target Model=ViT-B/162026.01 | 6.8 | 5.1 | 74.7 | |
| MSGAGAMethodology=Metric-Guided Selection, Attack Category=Ensemble-based, Target Model=ViT-B/162026.01 | 6.1 | 5.2 | 76 | |
| SINI-FGSMMethodology=Sinusoidal noise, Attack Category=Transfer-based, Target Model=ViT-B/162026.01 | 5.9 | 4.2 | 71.4 | |
| DI-FGSMMethodology=Diverse input, Attack Category=Transfer-based, Target Model=ViT-B/162026.01 | 3.8 | 3.2 | 84.8 | |
| SquareMethodology=Random search, Attack Category=Query-based, Target Model=ViT-B/162026.01 | 0.8 | 0.8 | 88.4 | |
| SimBA-DCTMethodology=Coordinate / frequency query, Attack Category=Query-based, Target Model=ViT-B/162026.01 | 0.4 | 0.4 | 97 | |
| PBOMethodology=Bayesian optimization, Attack Category=Query-based, Target Model=ViT-B/162026.01 | 0.3 | 0.3 | 97.2 | |
| RL-PPOMethodology=Reinforcement-learning agent, Attack Category=Agentic-based, Target Model=ViT-B/162026.01 | 0.3 | 0.3 | 97.3 |