Adversarial Attack on ImageNet Augmix
99.3Targeted Success RateS4ST
Evaluation results
| Method | Links | ||
|---|---|---|---|
| S4STSurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=true2024.10 | 99.3 | 99.9 | |
| TMIEns + SIASurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=false2024.10 | 98.4 | 99.5 | |
| S4STSurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=true2024.10 | 98.3 | 99.8 | |
| TMIEns + BSRSurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=false2024.10 | 98.1 | 99.6 | |
| TMIEns + DeCoWASurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=false2024.10 | 97.7 | 99 | |
| TMIEns + T-AugSurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=true2024.10 | 97.6 | 99.4 | |
| TMIEns + H-AugSurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=true2024.10 | 97.1 | 99.1 | |
| S4STSurrogate=ResNet-50, TTA-oriented=true2024.10 | 94.9 | 98.8 | |
| TMIEns + ODISurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=true2024.10 | 93 | 97.4 | |
| TMISelf-Ens + H-AugSurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=true2024.10 | 92.8 | 98.2 | |
| TMISelf-Ens + SIASurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=false2024.10 | 92.7 | 98.2 | |
| TMISelf-Ens + T-AugSurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=true2024.10 | 92.6 | 98.3 | |
| TMISelf-Ens + ODISurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=true2024.10 | 92.2 | 98.2 | |
| TMISelf-Ens + BSRSurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=false2024.10 | 91.3 | 97.8 | |
| TMI + SIASurrogate=ResNet-50, TTA-oriented=false2024.10 | 89.1 | 96.7 | |
| TMISelf-Ens + DeCoWASurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=false2024.10 | 88.1 | 96.9 | |
| TMI + T-AugSurrogate=ResNet-50, TTA-oriented=true2024.10 | 87.4 | 97.1 | |
| TMI + BSRSurrogate=ResNet-50, TTA-oriented=false2024.10 | 86.5 | 96.1 | |
| TMI + DeCoWASurrogate=ResNet-50, TTA-oriented=false2024.10 | 82.8 | 95.7 | |
| TMI + H-AugSurrogate=ResNet-50, TTA-oriented=true2024.10 | 80.7 | 94.5 | |
| TMI + ODISurrogate=ResNet-50, TTA-oriented=true2024.10 | 78.5 | 94.6 | |
| TMIEnsSurrogate=ResNet-50 + ResNet-152 + DenseNet-121 + VGG16-bn (Cross-Model Ensemble), TTA-oriented=false2024.10 | 28 | 69.1 | |
| TMISurrogate=ResNet-50, TTA-oriented=false2024.10 | 3.4 | 55.8 | |
| TMISelf-EnsSurrogate=ResNet-50 x 10 (Self-Ensemble), TTA-oriented=false2024.10 | 3.4 | 55.8 |