ResearchBenchmarksAdversarial Attack on CIFAR-100 (L-inf and L2 Perturbation Sweep)Follow62.87ASR (L-inf, 4/255)SDM58.928459.951760.97561.9983May 19, 2026Evaluation ResultsMethodMethodLinksASR (L-inf, 4/255)ASR (L-inf, 8/255)ASR (L-inf, 12/255)ASR (L-inf, 16/255)ASR (L-inf, 20/255)ASR (L-inf, 24/255)ASR (L2, 0.5)ASR (L2, 1.0)ASR (L2, 1.5)ASR (L2, 2.0)ASR (L2, 2.5)ASR (L2, 3.0)SDM2026.0562.8780.6391.4696.498.5999.4464.2984.594.9498.6699.6199.92C&W2026.0561.6378.0688.9194.9497.9299.1663.1879.7186.9188.8989.0389.03APGD2026.0559.6178.290.496.0298.6199.4661.282.8194.7998.7499.7199.96PGD2026.0559.0877.2389.5995.4598.2599.360.7881.8393.9798.2799.5699.92