Adversarial Attack on ImageNet-1k (ASR, Perceptual Quality, and Time)
0.58Time (s)CW
Evaluation results
| Method | Links | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| CWTarget Model=Salman2020 [39]2025.08 | 0.58 | 98.5 | 88.4 | 98.2 | 76 | 63.7 | 85.02 | 97.75 | 0.0263 | 6.77 | |
| DI-FGSMTarget Model=Salman2020 [39]2025.08 | 1.22 | 83.9 | 83.6 | 83 | 82.6 | 75.4 | 81.7 | 91.42 | 0.0849 | 49.39 | |
| PI-FGSM++Target Model=Salman2020 [39]2025.08 | 1.75 | 87.1 | 86.8 | 85.6 | 85.1 | 74.5 | 83.82 | 90.54 | 0.096 | 49.57 | |
| AutoAttackTarget Model=Salman2020 [39]2025.08 | 2.22 | 94.9 | 94.3 | 91.3 | 90.3 | 72.6 | 91.56 | 92.9 | 0.0757 | 21.78 | |
| DASHTarget Model=Salman2020 [39]2025.08 | 5.35 | 98.8 | 97.5 | 98.8 | 93.2 | 96.6 | 96.98 | 96.52 | 0.043 | 18.64 | |
| AdvADTarget Model=Salman2020 [39]2025.08 | 5.61 | 89.2 | 87.9 | 87.7 | 87.9 | 86.8 | 87.9 | 71.3 | 0.1949 | 50.14 | |
| DiffPGDTarget Model=Salman2020 [39]2025.08 | 10.4 | 76.2 | 69.4 | 74.8 | 68.5 | 72.3 | 72.24 | 87.5 | 0.0892 | 45.6 | |
| DiffAttackTarget Model=Salman2020 [39]2025.08 | 20.33 | 92.5 | 86.8 | 88.9 | 87.9 | 89.8 | 89.18 | 89.17 | 0.0763 | 40.78 |