Adversarial Attack on ILSVRC 2012
2.51Median L2 DistancePAR+CAB
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| PAR+CABTarget Model=vgg-192021.12 | 2.51 | 4.29 | |
| PAR+BBATarget Model=vgg-192021.12 | 3.26 | 4.77 | |
| PAR+SurFreeTarget Model=vgg-192021.12 | 3.31 | 4.88 | |
| PAR+CABTarget Model=senet2021.12 | 3.81 | 7.05 | |
| CABTarget Model=vgg-192021.12 | 3.95 | 9.07 | |
| PAR+CABTarget Model=dense2021.12 | 4.05 | 7.76 | |
| PAR+Sign-OPTTarget Model=vgg-192021.12 | 4.37 | 6.43 | |
| PAR+CABTarget Model=res-1012021.12 | 4.73 | 6.86 | |
| PAR+BoundaryTarget Model=vgg-192021.12 | 4.82 | 5.9 | |
| PAR+EvoTarget Model=vgg-192021.12 | 4.88 | 5.87 | |
| PAR+BBATarget Model=res-1012021.12 | 4.89 | 7.24 | |
| PAR+SurFreeTarget Model=senet2021.12 | 4.91 | 7.26 | |
| SurFreeTarget Model=vgg-192021.12 | 5.05 | 8.02 | |
| PAR+BBATarget Model=dense2021.12 | 5.39 | 7.78 | |
| BBATarget Model=vgg-192021.12 | 5.44 | 6.85 | |
| PAR+BBATarget Model=senet2021.12 | 5.45 | 7.15 | |
| PAR+EvoTarget Model=senet2021.12 | 5.51 | 7.94 | |
| PAR+SurFreeTarget Model=dense2021.12 | 5.54 | 8.22 | |
| PAR+EvoTarget Model=dense2021.12 | 5.71 | 8.46 | |
| PAR+HSJATarget Model=vgg-192021.12 | 5.89 | 6.75 | |
| PAR+SurFreeTarget Model=res-1012021.12 | 6.08 | 7.88 | |
| PAR+CABTarget Model=vit_s162021.12 | 6.19 | 24.96 | |
| PARTarget Model=vgg-192021.12 | 6.25 | 7.09 | |
| SurFreeTarget Model=senet2021.12 | 6.59 | 13.52 | |
| PAR+BoundaryTarget Model=senet2021.12 | 6.71 | 8.6 | |
| PAR+Sign-OPTTarget Model=senet2021.12 | 6.8 | 9.63 | |
| PAR+EvoTarget Model=res-1012021.12 | 6.83 | 8.34 | |
| PAR+BoundaryTarget Model=dense2021.12 | 6.98 | 9.6 | |
| PAR+CABTarget Model=r26_s322021.12 | 7.07 | 22.6 | |
| PAR+BoundaryTarget Model=res-1012021.12 | 7.29 | 9.19 | |
| PAR+HSJATarget Model=senet2021.12 | 7.76 | 10.06 | |
| PARTarget Model=senet2021.12 | 7.8 | 10.8 | |
| PAR+HSJATarget Model=dense2021.12 | 7.97 | 10.84 | |
| EvoTarget Model=vgg-192021.12 | 8.71 | 11.28 | |
| BBATarget Model=senet2021.12 | 8.72 | 12.31 | |
| PAR+BBATarget Model=vit_s162021.12 | 8.83 | 25.29 | |
| PAR+HSJATarget Model=res-1012021.12 | 8.92 | 10.06 | |
| BoundaryTarget Model=vgg-192021.12 | 8.96 | 10.92 | |
| SurFreeTarget Model=dense2021.12 | 8.99 | 14.07 | |
| BBATarget Model=res-1012021.12 | 9 | 9.78 | |
| PAR+Sign-OPTTarget Model=res-1012021.12 | 9.16 | 9.63 | |
| BBATarget Model=dense2021.12 | 9.17 | 10.83 | |
| PARTarget Model=res-1012021.12 | 9.19 | 10.6 | |
| CABTarget Model=dense2021.12 | 9.29 | 19.02 | |
| CABTarget Model=senet2021.12 | 9.54 | 22.14 | |
| PAR+SurFreeTarget Model=vit_s162021.12 | 9.79 | 26.32 | |
| PAR+BBATarget Model=r26_s322021.12 | 9.88 | 23.14 | |
| EvoTarget Model=senet2021.12 | 9.94 | 12.11 | |
| PAR+Sign-OPTTarget Model=dense2021.12 | 10.02 | 11.14 | |
| PARTarget Model=dense2021.12 | 10.08 | 11.5 | |
| PAR+SurFreeTarget Model=r26_s322021.12 | 10.11 | 23.9 | |
| PAR+BoundaryTarget Model=vit_s162021.12 | 11.09 | 27.81 | |
| CABTarget Model=res-1012021.12 | 11.2 | 19.52 | |
| PAR+EvoTarget Model=vit_s162021.12 | 11.5 | 27.54 | |
| PAR+BoundaryTarget Model=r26_s322021.12 | 11.62 | 25.68 | |
| PAR+EvoTarget Model=r26_s322021.12 | 11.8 | 24.79 | |
| EvoTarget Model=dense2021.12 | 11.91 | 13.59 | |
| SurFreeTarget Model=res-1012021.12 | 12.27 | 14.57 | |
| EvoTarget Model=res-1012021.12 | 12.53 | 13.89 | |
| BBATarget Model=r26_s322021.12 | 13.16 | 26.88 | |
| PAR+Sign-OPTTarget Model=r26_s322021.12 | 13.16 | 28.23 | |
| PAR+HSJATarget Model=r26_s322021.12 | 13.75 | 27.42 | |
| BBATarget Model=vit_s162021.12 | 13.86 | 28.36 | |
| PAR+Sign-OPTTarget Model=vit_s162021.12 | 14.23 | 28.78 | |
| BoundaryTarget Model=senet2021.12 | 14.53 | 18.29 | |
| PAR+HSJATarget Model=vit_s162021.12 | 14.55 | 30.05 | |
| PARTarget Model=r26_s322021.12 | 14.71 | 28.52 | |
| BoundaryTarget Model=dense2021.12 | 14.78 | 17.65 | |
| PARTarget Model=vit_s162021.12 | 15.1 | 30.75 | |
| SurFreeTarget Model=vit_s162021.12 | 15.88 | 32.09 | |
| BoundaryTarget Model=res-1012021.12 | 16.25 | 18.17 | |
| HSJATarget Model=vgg-192021.12 | 17.75 | 20.85 | |
| CABTarget Model=vit_s162021.12 | 18.69 | 44.85 | |
| CABTarget Model=r26_s322021.12 | 18.84 | 38.26 | |
| SurFreeTarget Model=r26_s322021.12 | 20.35 | 31.56 | |
| BoundaryTarget Model=vit_s162021.12 | 21.52 | 36.53 | |
| EvoTarget Model=r26_s322021.12 | 23.83 | 34.28 | |
| EvoTarget Model=vit_s162021.12 | 24.21 | 37.96 | |
| BoundaryTarget Model=r26_s322021.12 | 28.05 | 37.54 | |
| Sign-OPTTarget Model=vgg-192021.12 | 28.38 | 30.25 | |
| HSJATarget Model=senet2021.12 | 29.38 | 34.69 | |
| HSJATarget Model=dense2021.12 | 30.22 | 32.58 | |
| Sign-OPTTarget Model=dense2021.12 | 32.71 | 46.63 | |
| InitialTarget Model=vgg-192021.12 | 34.8 | 34.67 | |
| HSJATarget Model=res-1012021.12 | 35.13 | 36.29 | |
| Sign-OPTTarget Model=senet2021.12 | 44.37 | 47.59 | |
| InitialTarget Model=senet2021.12 | 49.52 | 53.96 | |
| Sign-OPTTarget Model=res-1012021.12 | 50.18 | 47.92 | |
| InitialTarget Model=dense2021.12 | 54.38 | 52.77 | |
| InitialTarget Model=res-1012021.12 | 58.6 | 54.71 | |
| HSJATarget Model=r26_s322021.12 | 63.67 | 63.81 | |
| HSJATarget Model=vit_s162021.12 | 65.81 | 67.41 | |
| Sign-OPTTarget Model=vit_s162021.12 | 83.47 | 83.78 | |
| Sign-OPTTarget Model=r26_s322021.12 | 83.99 | 81.34 | |
| InitialTarget Model=r26_s322021.12 | 94.72 | 88.49 | |
| InitialTarget Model=vit_s162021.12 | 96.25 | 92.94 |