Adversarial Attack on ImageNet clean
53Success RateMultiANDA
Evaluation Results
| Method | Links | |
|---|---|---|
| MultiANDASource model=ResNet-50, Target model=CLIP2022.09 | 53 | |
| ANDASource model=ResNet-50, Target model=CLIP2022.09 | 51.6 | |
| MultiANDASource model=IncRes-v2, Target model=CLIP2022.09 | 50.6 | |
| FIASource model=ResNet-50, Target model=CLIP2022.09 | 50.4 | |
| ANDASource model=IncRes-v2, Target model=CLIP2022.09 | 49.6 | |
| MultiANDASource model=VGG-19, Target model=CLIP2022.09 | 48.5 | |
| ANDASource model=VGG-19, Target model=CLIP2022.09 | 47.3 | |
| FIASource model=IncRes-v2, Target model=CLIP2022.09 | 46.2 | |
| VMI-FGSMSource model=IncRes-v2, Target model=CLIP2022.09 | 45.4 | |
| VMI-FGSMSource model=VGG-19, Target model=CLIP2022.09 | 43.8 | |
| FIASource model=VGG-19, Target model=CLIP2022.09 | 42.6 | |
| VMI-FGSMSource model=ResNet-50, Target model=CLIP2022.09 | 42.3 | |
| TAIGSource model=ResNet-50, Target model=CLIP2022.09 | 37.6 | |
| TAIGSource model=IncRes-v2, Target model=CLIP2022.09 | 37.6 | |
| TAIGSource model=VGG-19, Target model=CLIP2022.09 | 36.8 |