Adversarial Attack on ImageNet (Model Robustness)
25.3Inception v3 Robust AccuracyILPD
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| ILPDConstraint=l_inf, Epsilon=8/255, Setting=untargeted, Substitute Model=ResNet-502023.04 | 25.3 | 50.02 | 11.42 | 11.9 | 24.66 | |
| NAAConstraint=l_inf, Epsilon=8/255, Setting=untargeted, Substitute Model=ResNet-502023.04 | 22.86 | 37.02 | 10.8 | 11.42 | 20.53 | |
| ILA++Constraint=l_inf, Epsilon=8/255, Setting=untargeted, Substitute Model=ResNet-502023.04 | 18.22 | 34.62 | 10.46 | 11.4 | 18.68 | |
| DI2-FGSMConstraint=l_inf, Epsilon=8/255, Setting=untargeted, Substitute Model=ResNet-502023.04 | 15.84 | 34.04 | 9.66 | 11.02 | 17.64 | |
| I-FGSMConstraint=l_inf, Epsilon=8/255, Setting=untargeted, Substitute Model=ResNet-502023.04 | 11.68 | 10.88 | 9.1 | 10.56 | 10.56 |