Adversarial Attack on ImageNet 100 samples (val)
47Attack Success Rate (ASR)MoCo-EA
Evaluation results
| Method | Links | |
|---|---|---|
| MoCo-EASetting=Robust model, Norm=ℓ∞2026.05 | 47 | |
| AAASetting=Robust model, Norm=ℓ∞2026.05 | 43 | |
| PGDSetting=Robust model, Norm=ℓ∞2026.05 | 38 | |
| MI-FGSMSetting=Robust model, Norm=ℓ∞2026.05 | 38 | |
| AASetting=Robust model, Norm=ℓ∞2026.05 | 38 | |
| MoCo-EASetting=Obfuscated gradients, Norm=ℓ∞2026.05 | 32 | |
| PGDSetting=Obfuscated gradients, Norm=ℓ∞2026.05 | 17 | |
| MI-FGSMSetting=Obfuscated gradients, Norm=ℓ∞2026.05 | 17 | |
| AASetting=Obfuscated gradients, Norm=ℓ∞2026.05 | 17 | |
| AAASetting=Obfuscated gradients, Norm=ℓ∞2026.05 | 16 |