Adversarial Attack on GenImage SD
100CNNSpot PerformanceFPBA
Evaluation results
| Method | Links | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| FPBASurrogate Model=CNNSpot2024.07 | 100 | 96.6 | 59.4 | 67.3 | 47.9 | 49.8 | 21.1 | 51.2 | 56.2 | |
| PGDSurrogate Model=CNNSpot2024.07 | 99.3 | 88 | 48.5 | 52.2 | 48.6 | 49.9 | 15.4 | 48.1 | 50.1 | |
| S^2ISurrogate Model=CNNSpot2024.07 | 98 | 91 | 66.8 | 64.7 | 36.7 | 50.1 | 16.9 | 53 | 54.2 | |
| SSAHSurrogate Model=CNNSpot2024.07 | 94.8 | 5.4 | 0.5 | 1.1 | 0.6 | 3.6 | 0.7 | 0.3 | 1.7 | |
| IFGSMSurrogate Model=CNNSpot2024.07 | 78.3 | 71.5 | 30.9 | 34 | 27.1 | 28.3 | 11 | 27.8 | 32.9 | |
| MIFGSMSurrogate Model=CNNSpot2024.07 | 78.3 | 75.3 | 30.1 | 35.8 | 27.8 | 28.3 | 15 | 28.2 | 34.4 | |
| FPBASurrogate Model=MobileNet2024.07 | 49.7 | 46.8 | 44 | 100 | 44.1 | 49.4 | 16.6 | 45 | 42.2 | |
| PGDSurrogate Model=MobileNet2024.07 | 42.3 | 39.9 | 36.4 | 97.1 | 48.4 | 49.8 | 14.2 | 40 | 38.7 | |
| S^2ISurrogate Model=MobileNet2024.07 | 35.6 | 33.1 | 26.8 | 78.7 | 24.1 | 43.4 | 6.2 | 28 | 28.2 | |
| MIFGSMSurrogate Model=MobileNet2024.07 | 9.7 | 9.2 | 8.9 | 59 | 9.5 | 9 | 5.9 | 8.8 | 8.7 | |
| IFGSMSurrogate Model=MobileNet2024.07 | 9 | 8.9 | 8.9 | 58.9 | 9.1 | 9.1 | 4.4 | 8.5 | 8.3 | |
| SSAHSurrogate Model=MobileNet2024.07 | 1.1 | 2 | 0.6 | 96.7 | 0.5 | 1.9 | 1.2 | 2.2 | 1.4 |