Adversarial Attack on ILSVRC 2012 (val)
2.158Median L2 DistancePAR+CAB
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| PAR+CABTarget Model=ti_s162021.12 | 2.158 | 4.594 | — | |
| PAR+CABTarget Model=rti 162021.12 | 2.627 | 4.419 | — | |
| PAR+BBATarget Model=ti_s162021.12 | 2.787 | 4.772 | — | |
| PAR+BBATarget Model=rti 162021.12 | 2.932 | 4.465 | — | |
| PAR+SurFreeTarget Model=ti_s162021.12 | 3.701 | 5.76 | — | |
| PAR+SurFreeTarget Model=rti 162021.12 | 3.899 | 5.229 | — | |
| CABTarget Model=rti 162021.12 | 4.071 | 10.841 | — | |
| BBATarget Model=ti_s162021.12 | 4.182 | 5.99 | — | |
| PAR+EvoTarget Model=rti 162021.12 | 4.201 | 5.578 | — | |
| SurFreeTarget Model=ti_s162021.12 | 4.386 | 7.701 | — | |
| PAR+EvoTarget Model=ti_s162021.12 | 4.39 | 6.182 | — | |
| CABTarget Model=ti_s162021.12 | 4.559 | 10.665 | — | |
| PAR+BoundaryTarget Model=rti 162021.12 | 4.62 | 5.971 | — | |
| BBATarget Model=rti 162021.12 | 4.767 | 7.091 | — | |
| PAR+BoundaryTarget Model=ti_s162021.12 | 4.818 | 6.705 | — | |
| PAR+HSJATarget Model=ti_s162021.12 | 4.897 | 7.538 | — | |
| PAR+CABTarget Model=vit s322021.12 | 5.156 | 10.598 | — | |
| PAR+Sign-OPTTarget Model=vit s322021.12 | 5.18 | 6.135 | — | |
| PAR+HSJATarget Model=rti 162021.12 | 5.194 | 6.316 | — | |
| PAR+Sign-OPTTarget Model=ti_s162021.12 | 5.264 | 6.793 | — | |
| PAR+Sign-OPTTarget Model=ti t162021.12 | 5.264 | 6.793 | — | |
| PAR+BBATarget Model=vit s322021.12 | 5.309 | 11.292 | — | |
| PARTarget Model=rti 162021.12 | 5.353 | 6.5 | — | |
| PARTarget Model=ti_s162021.12 | 5.449 | 7.772 | — | |
| SurFreeTarget Model=rti 162021.12 | 5.69 | 9.325 | — | |
| EvoTarget Model=ti_s162021.12 | 6.616 | 8.872 | — | |
| EvoTarget Model=rti 162021.12 | 7.042 | 10.81 | — | |
| PAR+CABTarget Model=vit_l322021.12 | 7.894 | 22.077 | — | |
| PAR+CABTarget Model=vit b162021.12 | 8.171 | 25.306 | — | |
| BoundaryTarget Model=ti_s162021.12 | 8.296 | 10.757 | — | |
| PAR+SurFreeTarget Model=vit s322021.12 | 8.454 | 12.885 | — | |
| BBATarget Model=vit s322021.12 | 8.887 | 12.957 | — | |
| PAR+CABTarget Model=vit_b322021.12 | 8.949 | 21.314 | — | |
| BoundaryTarget Model=rti 162021.12 | 9.116 | 12.512 | — | |
| PAR+EvoTarget Model=vit s322021.12 | 9.166 | 13.339 | — | |
| PAR+SurFreeTarget Model=vit_l322021.12 | 9.381 | 22.719 | — | |
| PAR+BBATarget Model=vit_l322021.12 | 9.775 | 22.162 | — | |
| PAR+EvoTarget Model=vit_l322021.12 | 10.159 | 22.639 | — | |
| PAR+BBATarget Model=vit_b322021.12 | 10.196 | 22.026 | — | |
| PAR+BoundaryTarget Model=vit s322021.12 | 10.452 | 14.368 | — | |
| PAR+BoundaryTarget Model=vit_l322021.12 | 10.506 | 24.255 | — | |
| PAR+Sign-OPTTarget Model=vit b162021.12 | 10.696 | 15.447 | — | |
| SurFreeTarget Model=vit s322021.12 | 11.024 | 15.758 | — | |
| PAR+HSJATarget Model=vit_l322021.12 | 11.106 | 25.49 | — | |
| PAR+HSJATarget Model=vit s322021.12 | 11.451 | 15.842 | — | |
| PAR+SurFreeTarget Model=vit_b322021.12 | 11.684 | 22.92 | — | |
| PAR+BBATarget Model=vit b162021.12 | 11.737 | 26.72 | — | |
| EvoTarget Model=vit s322021.12 | 11.805 | 17.721 | — | |
| PARTarget Model=vit s322021.12 | 11.82 | 16.149 | — | |
| BBATarget Model=vit_b322021.12 | 11.835 | 24.534 | — | |
| PAR+EvoTarget Model=vit_b322021.12 | 12.179 | 23.134 | — | |
| PAR+SurFreeTarget Model=vit b162021.12 | 12.18 | 27.57 | — | |
| PARTarget Model=vit_l322021.12 | 13.083 | 26.662 | — | |
| CABTarget Model=vit s322021.12 | 13.122 | 22.509 | — | |
| PAR+EvoTarget Model=vit b162021.12 | 13.358 | 28.76 | — | |
| PAR+BoundaryTarget Model=vit_b322021.12 | 13.786 | 24.294 | — | |
| PAR+BoundaryTarget Model=vit b162021.12 | 13.842 | 29.304 | — | |
| SurFreeTarget Model=vit_b322021.12 | 14.838 | 27.774 | — | |
| BBATarget Model=vit_l322021.12 | 14.954 | 24.47 | — | |
| PAR+CABTarget Model=ti t162021.12 | 15.209 | 52.193 | — | |
| PAR+Sign-OPTTarget Model=vit_l322021.12 | 15.212 | 25.67 | — | |
| PAR+HSJATarget Model=vit_b322021.12 | 15.376 | 25.845 | — | |
| PAR+HSJATarget Model=vit b162021.12 | 15.599 | 31.158 | — | |
| PARTarget Model=vit_b322021.12 | 15.897 | 26.216 | — | |
| SurFreeTarget Model=vit_l322021.12 | 16.263 | 26.861 | — | |
| PAR+Sign-OPTTarget Model=vit_b322021.12 | 16.477 | 31.713 | — | |
| BBATarget Model=vit b162021.12 | 16.682 | 30.617 | — | |
| EvoTarget Model=vit_b322021.12 | 17.234 | 30.62 | — | |
| SurFreeTarget Model=vit b162021.12 | 17.341 | 33.533 | — | |
| PARTarget Model=vit b162021.12 | 17.518 | 32.103 | — | |
| BoundaryTarget Model=vit s322021.12 | 18.191 | 20.409 | — | |
| PAR+SurFreeTarget Model=ti t162021.12 | 18.868 | 53.815 | — | |
| PAR+BBATarget Model=ti t162021.12 | 19.215 | 53.288 | — | |
| CABTarget Model=vit_l322021.12 | 19.226 | 33.201 | — | |
| CABTarget Model=vit_b322021.12 | 19.376 | 38.092 | — | |
| EvoTarget Model=vit_l322021.12 | 19.952 | 28.534 | — | |
| PAR+EvoTarget Model=ti t162021.12 | 20.887 | 55.168 | — | |
| PAR+BoundaryTarget Model=ti t162021.12 | 21.075 | 55.263 | — | |
| BoundaryTarget Model=vit_l322021.12 | 21.173 | 31.358 | — | |
| BoundaryTarget Model=vit_b322021.12 | 21.407 | 31.815 | — | |
| PAR+Sign-OPTTarget Model=rti 162021.12 | 23.801 | 53.313 | — | |
| HSJATarget Model=ti_s162021.12 | 24.181 | 28.403 | — | |
| PAR+HSJATarget Model=ti t162021.12 | 24.363 | 56.813 | — | |
| PARTarget Model=ti t162021.12 | 25.372 | 58.037 | — | |
| CABTarget Model=vit b162021.12 | 26.268 | 48.165 | — | |
| BoundaryTarget Model=vit b162021.12 | 26.333 | 38.064 | — | |
| BBATarget Model=ti t162021.12 | 26.871 | 58.071 | — | |
| HSJATarget Model=rti 162021.12 | 28.195 | 30.339 | — | |
| EvoTarget Model=vit b162021.12 | 28.219 | 40.623 | — | |
| SurFreeTarget Model=ti t162021.12 | 30.971 | 61.017 | — | |
| Sign-OPTTarget Model=ti_s162021.12 | 34.884 | 38.06 | — | |
| Sign-OPTTarget Model=ti t162021.12 | 34.884 | 38.06 | — | |
| EvoTarget Model=ti t162021.12 | 35.033 | 65.997 | — | |
| BoundaryTarget Model=ti t162021.12 | 39.43 | 66.223 | — | |
| Sign-OPTTarget Model=vit s322021.12 | 40.168 | 41.231 | — | |
| InitialTarget Model=ti_s162021.12 | 41.607 | 42.921 | — | |
| HSJATarget Model=vit_l322021.12 | 46.57 | 56.298 | — | |
| InitialTarget Model=rti 162021.12 | 49.142 | 47.79 | — | |
| CABTarget Model=ti t162021.12 | 57.069 | 77.707 | — | |
| HSJATarget Model=vit s322021.12 | 57.971 | 51.718 | — |