# Adversarial Attack on ImageNet (Perturbation Metrics)

Source: [Adversarial Attack on ImageNet (Perturbation Metrics)](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T05:57:18.131Z

Evaluation of adversarial attack effectiveness on the ImageNet dataset, focusing on perturbation quality metrics such as Parsimon, Square, SignH, and Superpixel measures.

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Adversarial Attack |
| Dataset (including any stated split) | ImageNet |
| Metric | Parsimon |
| Unit | PERCENT |
| Direction | Higher is better |
| Results loaded | 19 of 19 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [Parsimon](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics.md?metric=Parsimon>): Higher is better; unit: PERCENT.

- [Square](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics.md?metric=Square>): Higher is better; unit: PERCENT.

- [SignH](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics.md?metric=SignH>): Higher is better; unit: PERCENT.

- [Acc (SignH)](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics.md?metric=Acc%20(SignH)>): Higher is better; unit: PERCENT.

- [Superpixel](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics.md?metric=Superpixel>): Higher is better; unit: PERCENT.

- [Perturbation Difference Magnitude](<https://www.sota2.com/research/sota/adversarial-attack-on-imagenet-perturbation-metrics.md?metric=Perturbation%20Difference%20Magnitude>): Lower is better; unit: SCALAR.

## Recorded results

| Method | Parsimon | Result date | Report paper |
| --- | --- | --- | --- |
| Salman ResNet-18 | 52.08 | Not recorded | 692fc3e7d6b0dd334293318c |
| Wong ResNet-50 | 48.32 | Not recorded | 692fc3e7d6b0dd334293318c |
| Engstrom ResNet-50 | 42.4 | Not recorded | 692fc3e7d6b0dd334293318c |
| Salman ResNet-50 | 41.24 | Not recorded | 692fc3e7d6b0dd334293318c |
| Salman WideResNet-50-2 | 36.84 | Not recorded | 692fc3e7d6b0dd334293318c |
| PyTorch ResNet-50 | 33.92 | Not recorded | 692fc3e7d6b0dd334293318c |
| Debenedetti XCiT-S12 | 31.72 | Not recorded | 692fc3e7d6b0dd334293318c |
| Singh ViT-S+ConvStem | 31.16 | Not recorded | 692fc3e7d6b0dd334293318c |
| Singh ConvNeXt-T+ConvStem | 30.52 | Not recorded | 692fc3e7d6b0dd334293318c |
| Debenedetti XCiT-M12 | 30.36 | Not recorded | 692fc3e7d6b0dd334293318c |
| Debenedetti XCiT-L12 | 30.12 | Not recorded | 692fc3e7d6b0dd334293318c |
| Singh ConvNeXt-S+ConvStem | 29.26 | Not recorded | 692fc3e7d6b0dd334293318c |
| Singh ViT-B+ConvStem | 27.12 | Not recorded | 692fc3e7d6b0dd334293318c |
| Singh ConvNeXt-B+ConvStem | 26.9 | Not recorded | 692fc3e7d6b0dd334293318c |
| Liu Swin-B | 26.86 | Not recorded | 692fc3e7d6b0dd334293318c |
| Liu ConvNeXt-B | 26.48 | Not recorded | 692fc3e7d6b0dd334293318c |
| Singh ConvNeXt-L+ConvStem | 25.36 | Not recorded | 692fc3e7d6b0dd334293318c |
| Liu ConvNeXt-L | 25.08 | Not recorded | 692fc3e7d6b0dd334293318c |
| Liu Swin-L | 24.16 | Not recorded | 692fc3e7d6b0dd334293318c |

### Salman ResNet-18

Parsimon: 52.08. Result ID: 69970b7d5698665ec458ef37.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa68e21e209131cea1ef57.md>)

[Implementation](<https://github.com/Microsoft/robust-models-transfer>)

Recorded evaluation configuration: {"source":"Salman","Architecture":"ResNet-18","Iterations":"100"}. This record does not assert independent reproduction.

### Wong ResNet-50

Parsimon: 48.32. Result ID: 69970b7d5698665ec458ef34.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa66e51e209131cea12efc.md>)

Recorded evaluation configuration: {"source":"Wong\[29\]","Architecture":"ResNet-50","Iterations":"100"}. This record does not assert independent reproduction.

### Engstrom ResNet-50

Parsimon: 42.4. Result ID: 69970b7d5698665ec458ef35.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

Recorded evaluation configuration: {"source":"Engstrom\[15\]","Architecture":"ResNet-50","Iterations":"100"}. This record does not assert independent reproduction.

### Salman ResNet-50

Parsimon: 41.24. Result ID: 69970b7d5698665ec458ef36.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa68e21e209131cea1ef57.md>)

[Implementation](<https://github.com/Microsoft/robust-models-transfer>)

Recorded evaluation configuration: {"source":"Salman\[23\]","Architecture":"ResNet-50","Iterations":"100"}. This record does not assert independent reproduction.

### Salman WideResNet-50-2

Parsimon: 36.84. Result ID: 69970b7d5698665ec458ef38.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa68e21e209131cea1ef57.md>)

[Implementation](<https://github.com/Microsoft/robust-models-transfer>)

Recorded evaluation configuration: {"source":"Salman","Architecture":"WideResNet-50-2","Iterations":"100"}. This record does not assert independent reproduction.

### PyTorch ResNet-50

Parsimon: 33.92. Result ID: 69970b7d5698665ec458ef39.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

Recorded evaluation configuration: {"source":"PyTorch","Architecture":"ResNet-50","Iterations":"100"}. This record does not assert independent reproduction.

### Debenedetti XCiT-S12

Parsimon: 31.72. Result ID: 69970b7d5698665ec458ef3a.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6e741e209131cea3ff08.md>)

Recorded evaluation configuration: {"source":"Debenedetti\[12\]","Architecture":"XCiT-S12","Iterations":"100"}. This record does not assert independent reproduction.

### Singh ViT-S+ConvStem

Parsimon: 31.16. Result ID: 69970b7d5698665ec458ef3d.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71011e209131cea4e7c0.md>)

[Implementation](<https://github.com/nmndeep/revisiting-at>)

Recorded evaluation configuration: {"source":"Singh\[25\]","Architecture":"ViT-S+ConvStem","Iterations":"100"}. This record does not assert independent reproduction.

### Singh ConvNeXt-T+ConvStem

Parsimon: 30.52. Result ID: 69970b7d5698665ec458ef3f.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71011e209131cea4e7c0.md>)

[Implementation](<https://github.com/nmndeep/revisiting-at>)

Recorded evaluation configuration: {"source":"Singh","Architecture":"ConvNeXt-T+ConvStem","Iterations":"100"}. This record does not assert independent reproduction.

### Debenedetti XCiT-M12

Parsimon: 30.36. Result ID: 69970b7d5698665ec458ef3b.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6e741e209131cea3ff08.md>)

Recorded evaluation configuration: {"source":"Debenedetti","Architecture":"XCiT-M12","Iterations":"100"}. This record does not assert independent reproduction.

### Debenedetti XCiT-L12

Parsimon: 30.12. Result ID: 69970b7d5698665ec458ef3c.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6e741e209131cea3ff08.md>)

Recorded evaluation configuration: {"source":"Debenedetti","Architecture":"XCiT-L12","Iterations":"100"}. This record does not assert independent reproduction.

### Singh ConvNeXt-S+ConvStem

Parsimon: 29.26. Result ID: 69970b7d5698665ec458ef40.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71011e209131cea4e7c0.md>)

[Implementation](<https://github.com/nmndeep/revisiting-at>)

Recorded evaluation configuration: {"source":"Singh","Architecture":"ConvNeXt-S+ConvStem","Iterations":"100"}. This record does not assert independent reproduction.

### Singh ViT-B+ConvStem

Parsimon: 27.12. Result ID: 69970b7d5698665ec458ef3e.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71011e209131cea4e7c0.md>)

[Implementation](<https://github.com/nmndeep/revisiting-at>)

Recorded evaluation configuration: {"source":"Singh","Architecture":"ViT-B+ConvStem","Iterations":"100"}. This record does not assert independent reproduction.

### Singh ConvNeXt-B+ConvStem

Parsimon: 26.9. Result ID: 69970b7d5698665ec458ef41.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71011e209131cea4e7c0.md>)

[Implementation](<https://github.com/nmndeep/revisiting-at>)

Recorded evaluation configuration: {"source":"Singh","Architecture":"ConvNeXt-B+ConvStem","Iterations":"100"}. This record does not assert independent reproduction.

### Liu Swin-B

Parsimon: 26.86. Result ID: 69970b7d5698665ec458ef45.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6eb01e209131cea41754.md>)

Recorded evaluation configuration: {"source":"Liu","Architecture":"Swin-B","Iterations":"100"}. This record does not assert independent reproduction.

### Liu ConvNeXt-B

Parsimon: 26.48. Result ID: 69970b7d5698665ec458ef43.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6eb01e209131cea41754.md>)

Recorded evaluation configuration: {"source":"Liu\[18\]","Architecture":"ConvNeXt-B","Iterations":"100"}. This record does not assert independent reproduction.

### Singh ConvNeXt-L+ConvStem

Parsimon: 25.36. Result ID: 69970b7d5698665ec458ef42.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa71011e209131cea4e7c0.md>)

[Implementation](<https://github.com/nmndeep/revisiting-at>)

Recorded evaluation configuration: {"source":"Singh","Architecture":"ConvNeXt-L+ConvStem","Iterations":"100"}. This record does not assert independent reproduction.

### Liu ConvNeXt-L

Parsimon: 25.08. Result ID: 69970b7d5698665ec458ef44.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6eb01e209131cea41754.md>)

Recorded evaluation configuration: {"source":"Liu","Architecture":"ConvNeXt-L","Iterations":"100"}. This record does not assert independent reproduction.

### Liu Swin-L

Parsimon: 24.16. Result ID: 69970b7d5698665ec458ef46.

[Reporting paper](<https://www.sota2.com/research/paper/692fc3e7d6b0dd334293318c.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa6eb01e209131cea41754.md>)

Recorded evaluation configuration: {"source":"Liu","Architecture":"Swin-L","Iterations":"100"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.