Adversarial Attack on ImageNet 21k (val)
0.694Median L2 DistancePAR+CAB
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| PAR+CABTarget Model=r ti 162021.12 | 0.694 | 1.423 | |
| PAR+BBATarget Model=r ti 162021.12 | 0.921 | 1.759 | |
| SurFreeTarget Model=r ti 162021.12 | 0.949 | 2.25 | |
| PAR+BBATarget Model=ti s162021.12 | 0.982 | 2.21 | |
| PAR+SurFreeTarget Model=r ti 162021.12 | 1.008 | 1.912 | |
| PAR+CABTarget Model=ti s162021.12 | 1.012 | 1.824 | |
| CABTarget Model=r ti 162021.12 | 1.121 | 2.084 | |
| PAR+SurFreeTarget Model=ti s162021.12 | 1.224 | 2.589 | |
| PAR+CABTarget Model=vit s162021.12 | 1.244 | 3.484 | |
| BBATarget Model=r ti 162021.12 | 1.263 | 2.315 | |
| PAR+BoundaryTarget Model=r ti 162021.12 | 1.296 | 2.307 | |
| PAR+Sign-OPTTarget Model=r ti 162021.12 | 1.353 | 2.548 | |
| PAR+EvoTarget Model=r ti 162021.12 | 1.487 | 2.223 | |
| SurFreeTarget Model=ti s162021.12 | 1.505 | 3.486 | |
| PAR+HSJATarget Model=r ti 162021.12 | 1.522 | 2.51 | |
| PARTarget Model=r ti 162021.12 | 1.554 | 2.592 | |
| BBATarget Model=ti s162021.12 | 1.643 | 3.125 | |
| PAR+CABTarget Model=ti l162021.12 | 1.752 | 6.145 | |
| PAR+CABTarget Model=r26 s322021.12 | 1.963 | 4.879 | |
| CABTarget Model=ti s162021.12 | 1.966 | 3.978 | |
| PAR+EvoTarget Model=ti s162021.12 | 2.055 | 3.284 | |
| PAR+BBATarget Model=vit s162021.12 | 2.098 | 4.547 | |
| PAR+BoundaryTarget Model=ti s162021.12 | 2.145 | 3.34 | |
| PAR+SurFreeTarget Model=vit s162021.12 | 2.183 | 4.603 | |
| CABTarget Model=vit s162021.12 | 2.364 | 10.554 | |
| PAR+HSJATarget Model=ti s162021.12 | 2.388 | 3.719 | |
| PAR+EvoTarget Model=vit s162021.12 | 2.427 | 5.236 | |
| Boundary AttackTarget Model=r ti 162021.12 | 2.442 | 3.876 | |
| PAR+Sign-OPTTarget Model=ti s162021.12 | 2.602 | 3.73 | |
| PARTarget Model=ti s162021.12 | 2.771 | 3.992 | |
| SurFreeTarget Model=vit s162021.12 | 3.048 | 7.849 | |
| Evolutionary Attack (Evo)Target Model=r ti 162021.12 | 3.093 | 3.924 | |
| PAR+BBATarget Model=ti l162021.12 | 3.456 | 7.816 | |
| PAR+BoundaryTarget Model=vit s162021.12 | 3.535 | 5.888 | |
| PAR+Sign-OPTTarget Model=vit s162021.12 | 3.578 | 6.679 | |
| PAR+HSJATarget Model=vit s162021.12 | 3.644 | 6.688 | |
| CABTarget Model=ti l162021.12 | 3.646 | 12.058 | |
| BBATarget Model=vit s162021.12 | 3.692 | 6.422 | |
| PAR+BBATarget Model=r26 s322021.12 | 3.899 | 6.953 | |
| PAR+SurFreeTarget Model=ti l162021.12 | 4.015 | 7.959 | |
| PAR+EvoTarget Model=ti l162021.12 | 4.041 | 8.576 | |
| PAR+SurFreeTarget Model=r26 s322021.12 | 4.078 | 6.989 | |
| PAR+EvoTarget Model=r26 s322021.12 | 4.091 | 7.122 | |
| Evolutionary Attack (Evo)Target Model=ti s162021.12 | 4.133 | 6.253 | |
| CABTarget Model=r26 s322021.12 | 4.214 | 8.034 | |
| PARTarget Model=vit s162021.12 | 4.326 | 7.516 | |
| HSJATarget Model=r ti 162021.12 | 4.367 | 8.373 | |
| PAR+HSJATarget Model=ti l162021.12 | 4.517 | 9.093 | |
| PAR+Sign-OPTTarget Model=r26 s322021.12 | 4.525 | 8.067 | |
| PAR+BoundaryTarget Model=ti l162021.12 | 4.604 | 8.795 | |
| PAR+HSJATarget Model=r26 s322021.12 | 4.752 | 7.781 | |
| PAR+BoundaryTarget Model=r26 s322021.12 | 4.762 | 8.073 | |
| Boundary AttackTarget Model=ti s162021.12 | 4.8 | 6.068 | |
| PAR+Sign-OPTTarget Model=ti l162021.12 | 4.91 | 9.387 | |
| PARTarget Model=ti l162021.12 | 5.016 | 10.18 | |
| Evolutionary Attack (Evo)Target Model=vit s162021.12 | 5.223 | 9.82 | |
| BBATarget Model=ti l162021.12 | 5.423 | 10.875 | |
| PARTarget Model=r26 s322021.12 | 5.706 | 9.189 | |
| BBATarget Model=r26 s322021.12 | 5.849 | 9.069 | |
| SurFreeTarget Model=ti l162021.12 | 5.979 | 11.001 | |
| SurFreeTarget Model=r26 s322021.12 | 6.331 | 10.485 | |
| Sign-OPTTarget Model=r ti 162021.12 | 6.392 | 12.083 | |
| Evolutionary Attack (Evo)Target Model=ti l162021.12 | 7.847 | 15.358 | |
| Boundary AttackTarget Model=vit s162021.12 | 7.963 | 11.533 | |
| Boundary AttackTarget Model=ti l162021.12 | 8.047 | 13.583 | |
| HSJATarget Model=ti s162021.12 | 8.06 | 13.444 | |
| InitialTarget Model=r ti 162021.12 | 8.075 | 14.297 | |
| Evolutionary Attack (Evo)Target Model=r26 s322021.12 | 8.195 | 12.047 | |
| Boundary AttackTarget Model=r26 s322021.12 | 11.25 | 14.102 | |
| HSJATarget Model=ti l162021.12 | 14.434 | 25.535 | |
| HSJATarget Model=vit s162021.12 | 16.369 | 25.268 | |
| Sign-OPTTarget Model=ti s162021.12 | 19.56 | 22.152 | |
| HSJATarget Model=r26 s322021.12 | 20.356 | 25.011 | |
| Sign-OPTTarget Model=ti l162021.12 | 20.952 | 38.496 | |
| InitialTarget Model=ti s162021.12 | 21.376 | 26.847 | |
| InitialTarget Model=ti l162021.12 | 23.591 | 43.866 | |
| Sign-OPTTarget Model=vit s162021.12 | 29.566 | 38.994 | |
| Sign-OPTTarget Model=r26 s322021.12 | 30.581 | 36.062 | |
| InitialTarget Model=vit s162021.12 | 40.52 | 45.828 | |
| InitialTarget Model=r26 s322021.12 | 41.161 | 43.24 |