Adversarial Attack on ImageNet 21k (test)
1.696Median L2 DistancePAR+CAB
Evaluation results
| Method | Links | ||
|---|---|---|---|
| PAR+CABTarget Model=vit_s322021.12 | 1.696 | 4.24 | |
| PAR+CABTarget Model=vit_b162021.12 | 1.72 | 6.235 | |
| PAR+BBATarget Model=vit_s322021.12 | 2.162 | 4.482 | |
| PAR+BBATarget Model=r50_s322021.12 | 2.218 | 7.322 | |
| PAR+EvoTarget Model=r50_s322021.12 | 2.218 | 8.006 | |
| PAR+BoundaryTarget Model=r50_s322021.12 | 2.218 | 8.55 | |
| PAR+SurFreeTarget Model=r50_s322021.12 | 2.218 | 8.067 | |
| PAR+CABTarget Model=r50_s322021.12 | 2.218 | 5.437 | |
| PAR+CABTarget Model=vit_h322021.12 | 2.225 | 6.007 | |
| CABTarget Model=vit_b162021.12 | 2.4 | 9.127 | |
| PAR+Sign-OPTTarget Model=r50_s322021.12 | 2.684 | 8.793 | |
| PAR+BBATarget Model=vit_h322021.12 | 2.877 | 6.431 | |
| PAR+SurFreeTarget Model=vit_s322021.12 | 2.951 | 5.387 | |
| PARTarget Model=r50_s322021.12 | 3.191 | 9.306 | |
| PAR+BBATarget Model=vit_b162021.12 | 3.202 | 8.071 | |
| PAR+HSJATarget Model=r50_s322021.12 | 3.218 | 7.788 | |
| SurFreeTarget Model=vit_b162021.12 | 3.343 | 9.349 | |
| PAR+EvoTarget Model=vit_s322021.12 | 3.361 | 5.728 | |
| PAR+SurFreeTarget Model=vit_b162021.12 | 3.412 | 8.187 | |
| PAR+SurFreeTarget Model=vit_h322021.12 | 3.608 | 7.291 | |
| PAR+EvoTarget Model=vit_b162021.12 | 3.965 | 8.777 | |
| BBATarget Model=vit_s322021.12 | 4.008 | 6.063 | |
| BBATarget Model=vit_b162021.12 | 4.012 | 10.119 | |
| BBATarget Model=vit_h322021.12 | 4.086 | 8.264 | |
| PAR+BoundaryTarget Model=vit_s322021.12 | 4.265 | 6.324 | |
| PAR+Sign-OPTTarget Model=vit_s322021.12 | 4.335 | 7.057 | |
| PAR+EvoTarget Model=vit_h322021.12 | 4.335 | 8.134 | |
| PAR+BoundaryTarget Model=vit_b162021.12 | 4.42 | 9.176 | |
| PAR+HSJATarget Model=vit_b162021.12 | 4.476 | 9.684 | |
| PAR+HSJATarget Model=vit_s322021.12 | 4.573 | 7.487 | |
| SurFreeTarget Model=vit_h322021.12 | 4.725 | 8.64 | |
| PAR+Sign-OPTTarget Model=vit_h322021.12 | 4.728 | 8.353 | |
| PAR+BoundaryTarget Model=vit_h322021.12 | 4.737 | 8.372 | |
| CABTarget Model=vit_s322021.12 | 4.749 | 8.815 | |
| CABTarget Model=vit_h322021.12 | 4.749 | 11.391 | |
| PARTarget Model=vit_s322021.12 | 4.968 | 7.814 | |
| SurFreeTarget Model=vit_s322021.12 | 4.996 | 6.319 | |
| PAR+HSJATarget Model=vit_h322021.12 | 5.185 | 9.159 | |
| PAR+Sign-OPTTarget Model=vit_b162021.12 | 5.251 | 10.238 | |
| EvoTarget Model=vit_s322021.12 | 5.311 | 7.617 | |
| EvoTarget Model=vit_b162021.12 | 5.562 | 12.347 | |
| PARTarget Model=vit_h322021.12 | 5.614 | 9.699 | |
| PARTarget Model=vit_b162021.12 | 5.637 | 10.397 | |
| EvoTarget Model=vit_h322021.12 | 6.107 | 11.24 | |
| SurFreeTarget Model=r50_s322021.12 | 6.83 | 13.943 | |
| BoundaryTarget Model=vit_b162021.12 | 7.519 | 13.406 | |
| BoundaryTarget Model=vit_h322021.12 | 7.822 | 12.011 | |
| BoundaryTarget Model=vit_s322021.12 | 8.012 | 9.768 | |
| CABTarget Model=r50_s322021.12 | 8.275 | 13.307 | |
| BBATarget Model=r50_s322021.12 | 8.666 | 17.211 | |
| BoundaryTarget Model=r50_s322021.12 | 12.587 | 15.687 | |
| EvoTarget Model=r50_s322021.12 | 14.355 | 13.757 | |
| HSJATarget Model=vit_b162021.12 | 16.244 | 27.895 | |
| HSJATarget Model=vit_h322021.12 | 20.486 | 29.87 | |
| Sign-OPTTarget Model=vit_b162021.12 | 23.278 | 38.681 | |
| Sign-OPTTarget Model=vit_h322021.12 | 24.656 | 37.362 | |
| HSJATarget Model=vit_s322021.12 | 24.728 | 27.328 | |
| Sign-OPTTarget Model=vit_s322021.12 | 27.239 | 36.776 | |
| InitialTarget Model=vit_b162021.12 | 28.839 | 44.511 | |
| InitialTarget Model=vit_h322021.12 | 34.515 | 44.885 | |
| HSJATarget Model=r50_s322021.12 | 38.993 | 29.514 | |
| InitialTarget Model=vit_s322021.12 | 42.939 | 47.117 | |
| Sign-OPTTarget Model=r50_s322021.12 | 47.589 | 36.398 | |
| InitialTarget Model=r50_s322021.12 | 56.912 | 41.267 |