Adversarial Attack on ImageNet 1,000 image subset (val)
74.4ASR (AT)LTA
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| LTASurrogate Model=VGG-162026.03 | 74.4 | 99.4 | 93.7 | 82 | 88.1 | |
| LTASurrogate Model=ResNet-1522026.03 | 58.3 | 95 | 81 | 62.4 | 73.1 | |
| LTASurrogate Model=ResNet-502026.03 | 57.6 | 91.3 | 77.3 | 64.1 | 63.9 | |
| DiffAttackSurrogate Model=VGG-162026.03 | 54 | 61.2 | 59.8 | 49.5 | 41.4 | |
| DiffAttackSurrogate Model=ResNet-1522026.03 | 47.9 | 51.3 | 53.4 | 42.5 | 44.8 | |
| P2FASurrogate Model=ResNet-1522026.03 | 46.6 | 87.6 | 53.6 | 37 | 32 | |
| DiffAttackSurrogate Model=ResNet-502026.03 | 46.5 | 38.5 | 47 | 40.6 | 35.5 | |
| BFASurrogate Model=ResNet-1522026.03 | 45 | 87.9 | 60 | 35.1 | 39.3 | |
| P2FASurrogate Model=ResNet-502026.03 | 44.8 | 67.5 | 52.8 | 32.9 | 21.9 | |
| BFASurrogate Model=ResNet-502026.03 | 44.8 | 77.4 | 57.7 | 32.8 | 26.9 | |
| MFAASurrogate Model=ResNet-1522026.03 | 44.4 | 64.3 | 46.6 | 33.3 | 26.5 | |
| ILPDSurrogate Model=ResNet-1522026.03 | 44.2 | 65.9 | 52.3 | 34.8 | 41.6 | |
| BFASurrogate Model=VGG-162026.03 | 44.2 | 72.9 | 45.3 | 31.1 | 19.6 | |
| MFAASurrogate Model=VGG-162026.03 | 43.7 | 51.5 | 38.9 | 32.9 | 22 | |
| ILPDSurrogate Model=ResNet-502026.03 | 43.4 | 57.3 | 49.6 | 32.9 | 29.4 | |
| GI-FGSMSurrogate Model=VGG-162026.03 | 43.3 | 37.9 | 35.8 | 29.1 | 17.1 | |
| ANDASurrogate Model=ResNet-1522026.03 | 43.2 | 79.1 | 49.5 | 32.1 | 36.6 | |
| ANDASurrogate Model=VGG-162026.03 | 43 | 67.3 | 36.9 | 29.9 | 20 | |
| ILPDSurrogate Model=VGG-162026.03 | 42.9 | 67.9 | 43.2 | 31.2 | 24.6 | |
| MFAASurrogate Model=ResNet-502026.03 | 42.8 | 49 | 46.3 | 30.8 | 18.9 | |
| ANDASurrogate Model=ResNet-502026.03 | 42.7 | 66.1 | 45.7 | 31.4 | 28 | |
| GI-FGSMSurrogate Model=ResNet-1522026.03 | 41.9 | 42.9 | 40.3 | 29.3 | 22.6 | |
| P2FASurrogate Model=VGG-162026.03 | 41.3 | 44.8 | 38.7 | 29 | 16.5 | |
| GI-FGSMSurrogate Model=ResNet-502026.03 | 40.9 | 25.2 | 37.7 | 29.1 | 15.9 |