Adversarial Attack on ImageNet Adversarial Training
81.6SIN tSucS4ST
Evaluation results
| Method | Links | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| S4STSurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=true2024.10 | 81.6 | 96.3 | 99.9 | 99.9 | 96.6 | 99 | 27.2 | 64.4 | 39.3 | 68.6 | 4.5 | 36.3 | |
| S4STSurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=true2024.10 | 79.8 | 96.1 | 99.9 | 99.9 | 94.3 | 98.5 | 25 | 63.8 | 35.3 | 65.8 | 3.5 | 34.4 | |
| S4STSurrogate=ResNet-50, TTA-oriented=true2024.10 | 64.1 | 92.3 | 99.8 | 99.9 | 89.2 | 96.7 | 13.7 | 54.5 | 21.2 | 57.5 | 2.2 | 31 |